Supported record field names

For each statement, a table presents the following information:

• Name (Filter)—Names of the operands and, where available, the type of filter
  Enter the name as one of the operands of a FIELDS parameter. If a filter type is displayed in parentheses, then filtering is available for the operand. You can enter the name as one of the operands of a FILTer or MATCH parameter, and you can filter according to the type. For more information, see Filtering-in-and-filtering-out-events.Most field names are the same as, or similar to, the IBM SMF record field names. Field names that end with a D are textual descriptions. For example, SMF80EVTQD is the SMF type 80 record fields SMF80EVT and SMF80EVQ converted to text. The FIELDS parameter is not case-sensitive.
• Tag, CEF name—Tags as they appear in a syslog message and, if applicable, the standard CEF names
  For more information, see Common Event Format (CEF) in the Proprietary-syslog-format-extensions topic. Tags are displayed in mixed case (see TAGCase in the OPTIONS-statement topic).
• Description—Descriptions of the operandsMany of the descriptions are the same as or similar to the IBM descriptions. Where relevant, the source of the descriptions is cited.

This section contains the following topics: