Confirm the RPF name executed by User

Products

• Roscoe

Issue/Introduction

Roscoe information can be recorded in the SMF.
If look at the Prefix.RO60MAC(SRECORD), can check the record information.
And, it seems that the RPF information is recorded as X'E4', can I see the name of the RPF from the ORIGINATING RPF and CURRENT RPF?
Also, the ORIGINATING RPF may be recorded as "**********", what does this mean?

Prefix.RO60MAC(SRECORD);

         ORG   SRDATA
MONRPF   DS    CL11                      ORIGINATING RPF
MONRPFC  DS    CL11                      CURRENT RPF
  :
  :
*=====================================================================*
*  RECORD TYPE EQUATES           RECORD TYPE EQUATES                  *
*=====================================================================*
SR@SON   EQU   16         X'10'          SIGNON                        
  :
  :
SR@RPF   EQU   228        X'E4'          RPF                    , RPFAC

Environment

Release : 6.0

Component : Roscoe Interactive Environment

Cause

z/OS

Resolution

You can check the RPF name that user executed from the "ORIGINATING RPF" and the "CURRENT RPF".

If the user executes only RPF(AAAAA) as a single command by itself and does not execute the next RPF, the ORIGINATING RPF will be "**********".
If RPF(AAAAA) executes the next RPF(BBBBB), the ORIGINATING RPF becomes AAAAAA and the CURRENT RPF becomes BBBBB.
Then, if RPF(BBBBB) executes the next RPF(CCCCC), the ORIGINATING RPF becomes BBBBB and the CURRENT RPF becomes CCCCC.

ORIGINATING RPF    CURRENT RPF
-------------------------------
**********         AAAAA           Execute 1 RPF
AAAAA              BBBBB           Execute 2 RPFs
BBBBB              CCCCC           Execute 3 RPFs