RACF command logging time difference in Compliance Manager

Products

• Compliance Manager for z/OS

Issue/Introduction

All RACF commands are recorded in the ADMACCOUNT table in Compliance Manager. There is an almost 8/10 (0.8) of a second difference between the time Compliance Manager records the RACF command and the time of the command in SMF. The Compliance Manager date/time stamp is earlier than the SMF date/stamp.

Environment

Release: ALL
Component: Compliance Manager-for z/OS Option for RACF

Resolution

The SMFWTM (SMF) fills in the time value SMFxTME. However, this is the time since midnight.

The value in the Compliance Event Manager/Compliance Manager event records are STCK format.

ECA_R001_TOD_UTC DS XL8 UTC timestamp
ECA_R001_TOD_SYS DS XL8 Local timestamp

Standard SMF record header

The slight time difference is because of the different format.