Roscoe information can be recorded in the SMF.
If look at the Prefix.RO60MAC(SRECORD), can check the record information.
And, it seems that the RPF information is recorded as X'E4', can I see the name of the RPF from the ORIGINATING RPF and CURRENT RPF?
Also, the ORIGINATING RPF may be recorded as "**********", what does this mean?
Prefix.RO60MAC(SRECORD);
ORG SRDATA
MONRPF DS CL11 ORIGINATING RPF
MONRPFC DS CL11 CURRENT RPF
:
:
*=====================================================================*
* RECORD TYPE EQUATES RECORD TYPE EQUATES *
*=====================================================================*
SR@SON EQU 16 X'10' SIGNON
:
:
SR@RPF EQU 228 X'E4' RPF , RPFAC
Release : 6.0
Component : Roscoe Interactive Environment
z/OS
You can check the RPF name that user executed from the "ORIGINATING RPF" and the "CURRENT RPF".
If the user executes only RPF(AAAAA) as a single command by itself and does not execute the next RPF, the ORIGINATING RPF will be "**********".
If RPF(AAAAA) executes the next RPF(BBBBB), the ORIGINATING RPF becomes AAAAAA and the CURRENT RPF becomes BBBBB.
Then, if RPF(BBBBB) executes the next RPF(CCCCC), the ORIGINATING RPF becomes BBBBB and the CURRENT RPF becomes CCCCC.
ORIGINATING RPF CURRENT RPF
-------------------------------
********** AAAAA Execute 1 RPF
AAAAA BBBBB Execute 2 RPFs
BBBBB CCCCC Execute 3 RPFs