Subsystem commands not suppressed by AOF CMD rule - OPS/MVS

Products

• OPS/MVS Event Management & Automation

Issue/Introduction

Subsystem commands, such as DB2 commands in the format -subsys (e.g., -DB2A DIS GROUP), are intercepted by an AOF Command (CMD) rule. However, even when the rule executes a RETURN "ACCEPT", the command continues to the target subsystem for execution.

Environment

OPS/MVS

Cause

By default, z/OS subsystem commands are processed by the target subsystem even if an AOF rule triggers. To suppress these commands, OPS/MVS must be configured to intercept Subsystem Interface (SSI) calls, and the rule must explicitly clear the command buffer.

Resolution

To effectively intercept a command before another subsystem processes it, you must follow these two requirements:

1. Set SSICMD Parameter: Ensure the SSICMD parameter is set to YES (you can verify this in OPSVIEW panel 4.1.1).
2. Nullify Command Text: Inside your AOF rule logic, you must set the cmd.text environmental variable to null before exiting the rule.

Example:

)PROC
/* Logic to determine if command should be blocked */
if [condition] then do
   cmd.text = ''
   return 'ACCEPT'
end