Modifying the supplied VMSECURE AUDIT event table

By default, Excerpt named ami.defender.zVM was not found in document xwiki:Mainframe.Security.AMIdocRef.AMIdocRef._links_AMIproducts.WebHome. handles all AUDIT event codes. To change the AUDIT events, continue with the following procedure. Otherwise, continue with Copying the required TEXT files to VMSECURE’s 191. 

For a complete list of the VMSECURE AUDIT codes, refer to CA VM:SECURE documentation.

To modify the supplied VMSECURE AUDIT event table

1. Log on to MAINT.

2. Run the CZAVSINS EXEC and enter y when prompted:

   >CZAVSINS                                          
   
   CZAVSI2020A Enter y to customize event codes     
   CZAVSI2020A or anything else for no.                       
   
   
   
   
   >y       An XEDIT session as displayed:

   CZAVSTT0 ASSEMBLE A1  F 80  Trunc=71 Size=130 Line=0 Col=1 Alt=0
   
   ====  * * * Top of File * * *
         |...+....1....+....2....+....3....+....4....+....5....+....6....+....7>.
   ====  CZAVSTT0 CSECT
   ====          DC CL1' ',CL4'0490',CL3'   '   ACCPETED LINK COMMAND
   ====          DC CL1' ',CL4'0010',CL3'   '   CH LOGON PASSWD
   ====          DC CL1' ',CL4'0020',CL3'   '   CH LOGON STOR SZ
   ====          DC CL1' ',CL4'0030',CL3'   '   CH MDISK LINK MODE
   ====          DC CL1' ',CL4'0040',CL3'   '   CH USER VM OPTIONS
   ====          DC CL1' ',CL4'0060',CL3'   '   CH USER SCREEN ATTRIB
   ====          DC CL1' ',CL4'0060',CL3'   '   CH USER SCREEN ATTRIB
   ====          DC CL1' ',CL4'0070',CL3'   '   DEF USER LINK TO USER
   ====>
   

3. To prevent an event from creating a record, replace the line with the AUDIT code from DC CL1' ' with the following code:

   DC CL1';',CL4'0070',

4. FILE your changes.

   The CZAVSINS EXEC assembles the file and creates a new CZAVSTT0 TEXT deck. A message similar to the following message is displayed:

   MACLIB   = DMSGPI   DMSOM    OSMACRO  VMXUSER
                                                                    
   ASSEMBLER (XF) DONE                          
   NO STATEMENTS FLAGGED IN THIS ASSEMBLY
   CZAVSI2022I CZAVSTT0 TEXT built, move to VMSECURE's 191
   CZAVSI2022I See installation instructions
   Ready; T=0.01/0.01 09:50:45
5. If the Ready message contains a return code greater than four, run CZAVSINS again and correct your error.

Where to go from here

See Copying-the-required-TEXT-files-to-the-VMSECURE-191-minidisk.