SELECT and DESELECT statements

The SELECT or DESELECT statement is optional. It specifies that API Event and SMF record types, of the record types configured with EVENT and SMF statements, are to be selected for formatting and forwarding to the syslog server.

If you code multiple SELECT or DESELECT statements – or, if your SELECT or DESELECT statements are qualified with FOR, more than one SELECT or DESELECT statement that applies to a particular LPAR – the effect is cumulative.

Example

If you code:

SELECT SMF(15 42)
SELECT SMF(30 80 DB2)

then the effect is exactly as if you had coded.

SELECT SMF(15 42 30 80 DB2)

If no SELECT or DESELECT statements are coded, then the default is to format and forward all configured API Event and SMF record types (all Event SMF record types for that an EVENT xxx or SMF xxx statement is coded). SELECT is ignored by CZASEND.

To select CONSOLE events for formatting, code SELect EVENT(CONSOLE).

Option

Description

SELect or DESELect

Must be specified as shown. SELECT selects events for formatting. DESELECT deselects events previously selected.

For and/or if

See FOR-and-IF-statements.

EVENT(Event_type)

Specifies one or more API 1 Event types to be selected for processing. Specify one or more Event types as defined by the Vendor or programmer responsible for the API 1 events. See API1-common-fields for more information. You might specify ALL to select or deselect all event types. ALL is recommended for use only with DESELECT.

SMF(SMF_type)

Specifies one or more SMF record types to be selected for processing. Specify one or more of the SMF record types from the table as shown. ALL is recommended for use only with DESELECT. For SELECT, you must also code an SMF xxx configuration statement for each xxx specified for SELECT SMF(xxx). For instance, if you code SELECT SMF(80), then you must also code an SMF 80 statement.

The supported SMF record types are shown in the following table. For a more complete description of the SMF record types, see SMF-record-type-overview, the descriptions of the SMF statements in this section, or the IBM Manual z/OS MVS System Management Facilities.

SMF type	Brief description
0	IPL (SMF initialization)
7	Data lost record
8	I/O configuration
14	INPUT or RDBACK data set activity
15	OUTPUT, UPDAT, INOUT, or OUTIN data set activity
17	Scratch data set status
18	Rename non-VSAM data set
22	Device configuration
30	Common address space work
42	DFSMS PDS€ member add, delete, rename, or replace
43	JES2 or JES3 startup
60	VSAM volume data set updated
61	Integrated catalog facility define activity
62	VSAM component or cluster opened
64	VSAM component or cluster close
65	Integrated catalog facility delete activity
66	Integrated catalog facility alter activity
80	RACF processing
81	RACF initialization
92	File system (zFS or HFS) activity
110	CICS monitoring
119	TCP/IP statistics
ABEND-AID	Compuware Abend-AID audit
APP_AUDIT	Compuware application audit SMF
ACF2	ACF2 processing
CORRELOG	IND$defender records For more information, see IND-defender.
DB2	IBM Db2 statistics, accounting, and performance
DIAG	Diagnostic formatting of indicated SMF record type number
TSS80	CA Top Secret (TSS) processing

SELECT and DESELECT statements

On this page