Does ACF2 support SMF record flooding?

Products

• ACF2
• ACF2 - DB2 Option
• ACF2 for zVM
• ACF2 - z/OS
• ACF2 - MISC

Issue/Introduction

We have coded an SMF record flooding filter for ACF2 SMF record (type 230). 

When a big job runs (change 50.000 users), after the 20.000th statement approx, a SMF record flood occurs. 

Then ACF2 wrote ACF0B901 messages in the System log (30.000 records approx). 

This high activity on System log triggered an issue with some applications running slow 

Does ACF2 support SMF record flood ? 

Environment

Release : 16.0

Component : CA ACF2 for z/OS

Resolution

ACF2 does not support SMF record flooding.

When SMF is unable to write the SMF record due to flooding limit (too many records written)

it returns a reason code to ACF2.

ACF2 puts out an error message to the syslog.

Additional Information

ACF0B901

  ACF2, SMF UNAVAILABLE, RETURN CODE = ret

Reason:

The System Management Facility (SMF) is not available for CA ACF2 use.

 

The return code (ret) is from the IBM SMFWTM macro.

Action:

Consult the appropriate IBM publication for an explanation of the SMFWTM return code shown in the message text. 

Report this error immediately to your system maintenance personnel because it indicates that CA ACF2 cannot write a security-related SMF record.