MODIFY CZAJOBLG command

You can use the MODIFY (abbreviated as F) command to change CZAJOBLG’s operating parameters or to display CZAJOBLG’s configuration and statistics.

Note

  • MODIFY is not available until CZAJOBLG initialization completes and you receive message CZA0205I, which confirms successful initialization.
  • Attempting to run MODIFY before initialization can cause z/OS to generate message IEE342I:
    MODIFY REJECTED-TASK BUSY

MODIFY CZAJOBLG syntax

As shown in the following examples, you must insert at least one space immediately following the MODIFY command (or its abbreviation, F). However, no other spaces are allowed in the statement .

The following syntax is valid:

✅️ MODIFY CZAJOBLG1,DEL(JOBLOGDEF1)

The following examples are invalid. The first one omits the required space after MODIFY and the second one incorrectly inserts a space before DEL:

❌️ MODIFYCZAJOBLG1,DEL(JOBLOGDEF1)
❌️ MODIFY CZAJOBLG1, DEL(JOBLOGDEF1)

MODIFY CZAJOBLG syntax diagram

The following diagram outlines the format for using the MODIFY command for CZAJOBLG.

 MODIFY CZAJOBLG.png

CZAJOBLG parameter descriptions

Parameter

Description

czajoblgName| taskName

Defines the name of the CZAJOBLG job or started task specified on the Start command or in the JCL

For a description of how this name is determined and specified, see "MODIFY command" in the "MVS system commands reference" section on the IBM Knowledge Center website.

This parameter is required.

DELete(name)

Closes (if active) the specified JOBLOG definition and removes it from processing

Warning

Check the name carefully before pressing Enter. DELete is irreversible except by refreshing the parameter file or by using MODIFY JOBLOG. However, the deletion lasts only until a MODIFY PARMs or CZAJOBLG is restarted.

To stop monitoring the specified JOBLOG permanently, you must remove it from your parameter file.

Display(joblogName)

Displays a summary of the currently active JOBLOG definitions for the specified JOBLOG, including record counts for each

JOBLOG(joblogParameters)

Defines a new JOBLOG or modifies an existing JOBLOG (see Changing Previously-Defined JOBLOGs)

Note

Additions or modifications using the JOBLOG parameter are temporary. They last only until CZAJOBLG is restarted. To permanently add or modify a JOBLOG, you must change your parameter file.

Valid values for joblogParameters are as follows:

Value

Description

JOBID(jobID)
or JOBName(jobName)

Identifies the job ID (also called job number, such as JOB01234 or STC05432) or job name running on the selected or default system

Neither JOBID or JOBName are case sensative. The characters are converted to uppercase automatically.

For JOBID:

  • The value must be 2 to 8 characters long.
  • The first 1 to 3 characters must be J, JO, JOB, T, TS, TSU, S, ST, STC, I, IN or INT. The remaining characters must be decimal digits.
  • If the numeric portion is less than or equal to 99999, the string is normalized to JOB, TSU, STC or INT followed by five digits. Otherwise, the string is normalized to J, T, S or I followed by seven digits.

For JOBName:

  • The value must be 1 to 8 characters long.
  • CZAJOBLG selects the first (or only) match executing a job.

  • You can use wildcards for JOBName. An asterix (*) matches any string of characters and a question mark (?) matches any single character.

    Note

    Using a wildcard with JOBName selects only the first matching job found, not all matching jobs.

If the specified job is not executing on the selected or default system, CZAJOBLG keeps checking every interval defind by JOBDelay seconds until the job executes.

Note

CZAJOBLG might miss a quick-running job (one that starts and ends within the specified number of JOBDelay seconds).

For information about the effect of the JOBLOG definition name and how JOBID or JOBName might apply if you omit NAME, see JOBLOG Names.

commonParameters

FILTER | MATCH

Streams only certain records from the data set to the SIEM

  • Use FILTER to specify records that you want to exclude from the transmission.
  • Use MATCH to specify a condition that records must meet in order to be transmitted.

FILTER and MATCH use regular expressions. For more information about regular expressions, see JOBLOG-statement .

If you omit this value, CZAJOBLG passes all records from the data set to BMC AMI Defender for transmission to the SIEM.

RX or NRX

Indicates the condition type for the filter or match

  • An RX condition is true if the record matches the specified regular expression.
  • An NRX condition is true if the record does not match.

This value is required if you use a filter or match.

ICASE

Specifies that expression processing should ignore case

If you omit this value, regular expression processing is case sensitive.

'regularExpression'

Defines the regular expression to be used for FILTER or MATCH

NAME(name)

Specifies a name for the JOBLOG definition

This value is optional.

The name:

  • Must be from 1 to 20 characters long
  • Cannot contain embedded spaces or parentheses

For more information, see JOBLOG Names.

PARMs 
or PARMs(dataSetSpecification)

Specifies the data set from which CZAJOBLG takes new operating parameters

Because the parameter file is an input file, specifiying * (SYSOUT) is invalid and the output variable symbols are not supported. CZAJOBLG processes uppercase, unquoted command operands, so you can specify a zFS file as one of the following:

  • F CZAJOBLG,PARMS('/u/myfiles/czjparms')
  • F CZAJOBLG,'PARMS(/u/myfiles/czjparms)'

The default PDS(E) is DD:CZAPARMS, the library specified by the CZAPARMS DD statement.

If you omit this value, the last parameter file specified. For example, the data set specified or defaulted to in any preceding MODIFY PARMS or, if none, the data set specified or defaulted to in START PARMS.

For more information about the parameter file, see CZAJOBLG Parameters.

For information about the effect of a parameter file refresh on existing JOBLOGs, see Changing Previously-Defined JOBLOGs.

TRACE(traceSpecifications)

Tells CZAJOBLG to use one or more trace types (in any order) or no trace type, as described in Using-the-TRACE-facility

Prefix any of the trace specifications with a minus sign (-) to indicate negation. The specifications are processed from left to right. In the following example, the statement indicates that all TRACE output is used except that related to translation and the operating environment:

TRACE(ALL -XL -ENV)

After processing TRACE, CZAJOBLG displays the trace specifications that are in effect. To display the current trace specifications only, enter the following statement:

F CZAJOBLG,TRACE()

For more information about TRACE, see TRACE-facility-syntax.


Related topic

CZAJOBLG-parameters


 

Tip: For faster searching, add an asterisk to the end of your partial query. Example: cert*