Top Secret TSSUTIL And SMF Records

book

Article ID: 126709

calendar_today

Updated On:

Products

CA Top Secret CA Top Secret - LDAP

Issue/Introduction

What SMF type records are read by TSSUTIL?

Will the TSSUTIL only report against SMF type 80 records? Does TSSUTIL process any other SMF records than the 80s?

Environment

Release:
Component: TSSMVS

Resolution

Top Secret creates SMF 80 and SMF 231 records. 

SMF 80 contain z/OS security events.

If OPTIONS(32) is turned on, USS events are written also written to the Audit Tracking File and the SMF 80 records. 

SMF 231 contains USS events and SAF Trace Report.
 
TSSUTIL doesn't read the SMF 231 records. 

TSSOERPT can be used to report on the SMF 231 records.