ALERT: Some images may not load properly within the Knowledge Base Article. If you see a broken image, please right-click and select 'Open image in a new tab'. We apologize for this inconvenience.

Suppress The FACILITY Related Entries From A Top Secret TSSUTIL Report With CLASS(O)


Article ID: 14599


Updated On:


Top Secret


Is there a way to suppress or remove the FACILITY related audit entries from a TSSUTIL CLASS(O) audit report? CLASS(O) reports on changes that have been made to TSS control options via the TSS MODIFY command as well as changes to the security file via TSS commands if LOG(CMDA) or LOG(CMDS) is set.


Release: TOPSEC00200-15-Top Secret-Security


Currently there is no built in functionality to suppress the FACILITY specific audit entries from a TSSUTIL CLASS(O) audit report.

This type of custom report can be achieved by a user written or 3rd party reporting application.

A TSSUTIL EXTRACT CLASS(O) can be run to create a dataset with audit entries.

Then the user written reporting program or 3rd party reporting application can use the dataset as input to generate the custom report by excluding FACILITY audit entries.

TSSUTIL is documented here: