SELECT and DESELECT statements

The SELECT or DESELECT statement is optional. It specifies that API Event and SMF record types, of the record types configured with EVENT and SMF statements, are to be selected for formatting and forwarding to the syslog server.

If you code multiple SELECT or DESELECT statements – or, if your SELECT or DESELECT statements are qualified with FOR, more than one SELECT or DESELECT statement that applies to a particular LPAR – the effect is cumulative.

Example

If you code:

SELECT SMF(15 42)
SELECT SMF(30 80 DB2)

then the effect is exactly as if you had coded.

SELECT SMF(15 42 30 80 DB2)

If no SELECT or DESELECT statements are coded, then the default is to format and forward all configured API Event and SMF record types (all Event SMF record types for that an EVENT xxx or SMF xxx statement is coded). SELECT is ignored by CZASEND.

To select CONSOLE events for formatting, code SELect EVENT(CONSOLE).

Option

Description

SELect or DESELect

Must be specified as shown. SELECT selects events for formatting. DESELECT deselects events previously selected.

For and/or if

See FOR-and-IF-statements.

EVENT(Event_type)

Specifies one or more API 1 Event types to be selected for processing. Specify one or more Event types as defined by the Vendor or programmer responsible for the API 1 events. See API1-common-fields for more information. You might specify ALL to select or deselect all event types. ALL is recommended for use only with DESELECT.

SMF(SMF_type)

Specifies one or more SMF record types to be selected for processing. Specify one or more of the SMF record types from the table as shown. ALL is recommended for use only with DESELECT. For SELECT, you must also code an SMF xxx configuration statement for each xxx specified for SELECT SMF(xxx). For instance, if you code SELECT SMF(80), then you must also code an SMF 80 statement.

The supported SMF record types are shown in the given table. For a more complete description of the SMF record types, see SMF-record-type-overview, the descriptions of the SMF statements in this section, or the IBM Manual z/OS MVS System Management Facilities.

SMF type	Brief description
7	Data Lost record
14	INPUT or RDBACK Data Set Activity record
15	OUTPUT, UPDAT, INOUT, or OUTIN Data Set Activity record
17	Scratch Data Set Status record
18	Rename Non-VSAM Data Set record
30	Common Address Space Work record
42	DFSMS PDS€ member add, delete, rename, or replace record
60	VSAM Volume Data Set Updated record
61	Integrated Catalog Facility Define Activity record
62	VSAM Component or Cluster Opened record
64	VSAM Component or Cluster Close record
65	Integrated Catalog Facility Delete Activity record
66	Integrated Catalog Facility Alter Activity record
80	RACF processing record
92	File System (zFS or HFS) Activity record
110	CICS Monitoring
119	TCP/IP Statistics
ABEND-AID	Compuware Abend-AID audit record
APP_AUDIT	Compuware Application Audit SMF records
ACF2	ACF2 processing record
CORRELOG	IND$defender records For more information, see IND-defender.
DB2	DB2 Statistics, Accounting, and Performance records
DIAG	Diagnostic formatting of indicated SMF record type number
TSS80	CA Top Secret (TSS) processing record

SELECT and DESELECT statements

On this page