Zowe SMF Record Volume for CEM
search cancel

Zowe SMF Record Volume for CEM

book

Article ID: 436646

calendar_today

Updated On:

Products

Zowe Compliance Event Manager

Issue/Introduction

When implementing Zowe security (for example, using sample job SZWESAMP(ZWEIACF)), users may have questions about:

  • Which SMF record types are generated by the Zowe main server
  • The expected volume of these SMF records

The sample job includes the following configuration:

SET RESOURCE(FAC)RECKEY IRR ADD(RAUDITX ROLE({zowe.setup.security.groups.stc}) + SERVICE(READ) ALLOW)F ACF2,REBUILD(FAC)

Environment

Zowe, Compliance Event Manager

Resolution

SMF Type 83 records are created specifically when using Personal Access Tokens (PAT). This means that no SMF records will be generated for CEM. The primary usage is for B4G, which utilizes PATs.

The generation of these records during PAT creation and usage is configurable and is disabled by default.

Additional Information

Note: Record type 83 is a RACF processing record. This record type may be replaced by other SMF types depending on the External Security Manager (ESM) in use:

  • ACF2: SMF type 230

  • TSS: SMF type 231

SMF records.

Powered by Wolken Software