ACF2 not initialised causing IFA707I SMF CANNOT CONNECT TO LOGSTREAM REASON=SAF RESOURCE WAS NOT DEFINED

book

Article ID: 196583

calendar_today

Updated On:

Products

CA ACF2 CA ACF2 - DB2 Option CA ACF2 for zVM CA ACF2 - z/OS CA ACF2 - MISC CA LDAP Server for z/OS CA PAM Client for Linux for zSeries CA Web Administrator for Top Secret

Issue/Introduction

We recently implemented a SMF INMEM resource dynamically by using SET SMF=.

When we subsequently IPLd the system, we received IFA707I SMF CANNOT CONNECT TO LOGSTREAM IFASMF.PSY1.INMEM 
REASON=SAF RESOURCE WAS NOT DEFINED. This resulted in lost SMF data as IFA707I causes the SMF LOGSTREAM settings to be rejected.   

Review  of the syslog appears to show the SMF address space initalising and generating the IFA707I  prior to ACF2 address space initialisation.

Subsequently doing a SET SMF= defines the SMF logstream environment correctly with no IFA707I, and the INMEM resource is available   

                
 

Environment

Release : 16.0

Component : CA ACF2 for z/OS

Resolution

Broadcom and IBM suggests to use INMEM in different SMF PARMLIB, and activate this SMFPARMxx once ACF2 is initialized. You can use an automated operator to look for ACF2 initialisation and then activate the different SMF. ACF2 requires SMF to be up before any requests are processed so that proper auditing can be done.