All RACF commands are recorded in the ADMACCOUNT table in Compliance Manager. There is an almost 8/10 (0.8) of a second difference between the time Compliance Manager records the RACF command and the time of the command in SMF. The Compliance Manager date/time stamp is earlier than the SMF date/stamp.
Release: ALL
Component: Compliance Manager-for z/OS Option for RACF
The SMFWTM (SMF) fills in the time value SMFxTME. However, this is the time since midnight.
The value in the Compliance Event Manager/Compliance Manager event records are STCK format.
ECA_R001_TOD_UTC DS XL8 UTC timestamp
ECA_R001_TOD_SYS DS XL8 Local timestamp
Standard SMF record header
The slight time difference is because of the different format.