SMF TSS80 fields
These fields are for CA Top Secret.
- For RACF SMF Type 80 fields, see SMF-80-fields.
- For TSS records for Unix System Services events, see SMF-TSS231-fields.
- For more TSS common fields, see SMF-TSS-common-fields.
TSS SMF 80 records are for legacy MVS events.
Name | (Filter) | Tag | CEF Name | Description |
|---|---|---|---|---|
FLAACC | AccAllow | Allowed access, expressed in hex | ||
FLAACCD | (Mapped Integer) | AccAllow | Allowed access, expressed in text | |
FLACID | (EGNX) | AcidNm | Acid name | |
FLAID | AcidID | Acid ID | ||
FLATTR | Attr | User attributes | ||
FLCATP | Options | If FLSVC=X'1A' this = CTGOPTNS | ||
FLCLASS | (EGNX) | Class | Resource class | |
FLCLASS2 | ResClass | Two-byte resource code | ||
FLCLASSD | (Mapped Integer) | ClassD | Resource class, expressed in text | |
FLDATE | FLDATE | Date (packed YYDDDF) | ||
FLDETLRC | (Integer) | Reas | Detail reason code, expressed as an integer | |
FLDETLRCD | (Mapped Integer) | Reas | Detail reason code, expressed in text | |
FLDID | DeptID | Dept ID | ||
FLEVENT | FLEVENT | Security-event (SKEVENT) | ||
FLFLAGS | LogReas | Logging indicators (SKLOGF) | ||
FLFLAGS_Audit | (Boolean) | LogReas_Audit | Logging indicators (SKLOGF) — Audit | |
FLFLAGS_Forced | (Boolean) | LogReas_Forced | Logging indicators (SKLOGF) — Forced | |
FLFLAGS_ForceMsg | (Boolean) | LogReas_ForceMsg | Logging indicators (SKLOGF) — Force message to user | |
FLFLAGS_NoIO | (Boolean) | LogReas_NoIO | Logging indicators (SKLOGF) — Do not perform I/O | |
FLFLAGS_NoSMF | (Boolean) | LogReas_NoSMF | Logging indicators (SKLOGF) — Don’t write SMF record | |
FLFLAGS_SendMsg | (Boolean) | LogReas_SendMsg | Logging indicators (SKLOGF) — Send message by ID | |
FLFLAGS_TrueFail | (Boolean) | LogReas_TrueFail | Logging indicators (SKLOGF) — True failure | |
FLFLAGS_Violation | (Boolean) | LogReas_Violation | Logging indicators (SKLOGF) — Violation | |
FLGRPUID | (EGNX) | FLGRPUID | VM group userid | |
FLIND1 | (Mapped Integer) | Indic1 | Indicators | |
FLIND2 | AuditReason | The audit reason expressed as text: Action, Resource, User, Facility, Volume, or DSN | ||
FLINDEV | (EGNX) | Dev | Input device (terminal/reader) | |
FLJOB | (EGNX) | FLJOB | Job name | |
FLJOBID | JobID | Job ID (JES format) | ||
FLJOBNUM | (Integer) | Job number (JES format) | ||
FLJOBTYP | (Integer) | Type | Jobtype | |
FLLOCK | FLLOCK | Lockbyte X'FF' when in use | ||
FLMODE | (EGNX) | Mode | User's mode | |
FLMODULE | (Mapped Integer) | ModNm | Security module (SKLOGM) | |
FLNVIOL | FLNVIOL | Violation count (for session) | ||
FLOGOPTS | FLOGOPTS | Copy of user's logging options | ||
FLPGM | (EGNX) | Prog | sourceServiceName | Program in control |
FLRACC | AccReq | Requested access, expressed in hex | ||
FLRACCD | (Mapped Integer) | AccReq | Requested access, expressed in text | |
FLRDTE | FLRDTE | Reader start date | ||
FLREADY | FLREADY | X'FF' when buffer complete | ||
FLRESL | (Integer) | FLRESL | Machine length of resource V5L0JL01 | |
FLRETCOD | (Integer) | RC | act | Return code |
FLRTME | FLRTME | Reader start time | ||
FLSTCK | (Integer) | FLSTCK | CPU time entry given | |
FLSVC | SVC | Calling SVC, expressed in hex | ||
FLSVCD | (Mapped Integer) | SVC | Calling SVC, expressed in text | |
FLTIME | FLTIME | Time of day (HHMMSSTH) | ||
FLTYPNUM | (EGNX) | Type (S=STC,J=JOB,....) | ||
FLVAR | Data | Variable data (if 1-byte resource class) This field is formatted only if FLVAR is correctly formatted in the SMF record. | ||
FLVAR_Inc | (EGNX) | Data | Variable data (if 1-byte resource class) This field is formatted only if FLVAR is incorrectly formatted in the SMF record. | |
FLVAR_APF | (Boolean) | APF | APF authorization status of the resource dataset name For more information, see SMF-record-enrichment. | |
FLVAR2 | (EGNX) | Data | Variable data (if 2-byte resource class) | |
FLVOLSER | (EGNX) | Vol | Volume serial | |
SMF80CAT | (EGNX) | Cat | cat | Constant TSS80 |
SMF80DESD | Desc | Descriptor flags |
The SMF field names and descriptions are derived from CA Top Secret for z/OS documentation.
Related topic