SMF 119 fields of the login failure record (subtype 94)


Z/OS ONLY

The following table shows SMF 119 fields of the login failure record for subtype 94:

 

Name

(Filter)

Tag

CEF Name

Description

SMF_119SSH_LFLIP

 

LocIP

c6a3

Local IP address - server IPv6

SMF_119SSH_LFLIP_L

 

dst

 

Local IP address - server IPv6

SMF_119SSH_LFLIP_V4

 

LocIP

dst

Local IP address  IPv4 format

SMF_119SSH_LFLPort

Integer

LocPort

dpt

Local port number - server

SMF_119SSH_LFLPort_L

Integer

dstPort

 

Local port number - server

SMF_119SSH_LFReason

Mapped Integer

LoginFailureReason

 

Login failure reason

SMF_119SSH_LFRIP

 

RemtIP

c6a2

Remote IP address - client IPv6

SMF_119SSH_LFRIP_L

 

src

 

Remote IP address - client IPv6

SMF_119SSH_LFRIP_V4

 

RemtIP

src

Remote IP address  IPv4 format

SMF_119SSH_LFRPort

Integer

RemtPort

spt

Remote port number - client

SMF_119SSH_LFRPort_L

Integer

srcPort

 

Remote port number - client

SMF_119SSH_LFUserID

EGNX

UserName

 

User ID received by server

 

Tip: For faster searching, add an asterisk to the end of your partial query. Example: cert*

BMC AMI Datastream for z/OS 7.1