EVENT statement
The EVENT statement is coded to control the formatting and forwarding of Application Program Interface (API1) events. Code an EVENT statement for an API1 event as directed by the author or vendor of the relevant API1 program.
Parameter | Description |
|---|---|
EVENT ChangeMan statement | ChangeMan is a product of Serena Software, part of Micro Focus. ChangeMan keeps track of user and system data set modification. ChangeMan monitors alterations to individual data sets and reports what type of modification was done by you, including link edits and SUPERZAPs of load modules. Monitoring ChangeMan events helps to monitor system integrity. |
EVENT GENERIC statement | See The GENERIC Event Type in BMC AMI Defender for z/OS Supplementary Programs. |
EVENT IND$FILE statement | EVENT IND$FILE records might be written by the IND$defender product. For more information, see IND-defender. |
EVENT JOBLOG statement | CZAJOBLG is a program that streams the JES-spooled output of one or more running z/OS jobs, started tasks or both to any SIEM in real-time. The streaming of JES SYSOUT is commonly referred to as Job Log support. See BMC AMI Defender for z/OS Supplementary Programs for details. |
EVENT LSPACE statement | CZALSPAC is a simple list space utility program that sends the allocated and available space on one or more on-line DASD volumes in a syslog message to your configured syslog server. CZALSPAC also serves as an example of an API1 program. Your syslog server might optionally be configured to send an alert of your choosing if available space falls below some configured threshold. See BMC AMI Defender for z/OS Supplementary Programs for details. One LSPACE Event is generated by the utility for each DASD volume specified. Code an EVENT LSPACE statement to specify how the event is to be formatted as a syslog message. |
EVENT MODIFY statement | MODIFY is not an event in the sense of most BMC AMI Defender event types. If you enable EVENT MODIFY, BMC AMI Defender can receive MODIFY commands from API 1 programs as Type CorreLog Minor 12. Consider the potential security implications before enabling EVENT MODIFY. EVENT MODIFY supports only the LOG(HEX) parameter. |
Common parameters
Parameter | Description | ||||||||
|---|---|---|---|---|---|---|---|---|---|
EVENT type | Must be specified as shown. For type code LSPACE or the API1 event identifier provided by the API1 program author or vendor. If you code more than one EVENT statement for the same type then a subsequent SMF statement for the same type replaces any EVENT statement(s) for that type that came before. | ||||||||
FACILITY(facility-name) | Specifies the RFC 3164 facility that is to be indicated as the origin of the syslog messages corresponding to the indicated API1 event. If you omit this parameter, it defaults as specified by the API1 author or vendor or as shown in the table. If you would like a different facility indicated, code one of the RFC 3164 facility names as listed in Syslog-facilities-and-severities.
| ||||||||
FIELDs(fieldname…) | Specifies the names of the API1 event fields that are to be transmitted to the BMC Defender Server or other syslog console, and the order in that they are to appear in the message. Specify one or more of the fields as described in FIELDS-parameter. You might only specify fields appropriate to the event type. | ||||||||
Filter-specification | |||||||||
LOG | |||||||||
LOG(HEX) | Specifies that the selected Event data is to be logged on CZAPRINT and optionally dumped in hexadecimal and character format. This parameter is intended primarily for diagnostic purposes. Use care in specifying LOG(HEX) as it might generate a large volume of print records, especially if the API1 program generates many events. | ||||||||
PROCess(‘process-tag’) | Specifies the tag that appears at the start of the syslog messages for the indicated event type, following the priority, timestamp and hostname, and preceding the formatted fields. Specify the exact process tag that you want to include in syslog messages, including any spaces and punctuation. Process-tag might be any length from the null string (‘’) to 32 characters. If PROCess is omitted, it defaults as specified by the API1 program author or vendor or as indicated here followed by the leading delimiter from OPTIONS DELIM.
| ||||||||
SEVerity(severity) | Specifies the syslog severity. See Syslog-facilities-and-severities. The API1 developer or vendor might specify the severity when creating the event; if so this parameter has no effect. For the following event types, Severity has the value shown.
|
Related topics