Running SQL query for ENF event data. Where is the info on the actual USER causing the event?

book

Article ID: 49411

calendar_today

Updated On:

Products

CA 1 Tape Management CA 1 Tape Management - Copycat Utility CA 1 Tape Management - Add-On Options CA Compress Data Compression for MVS CA Compress Data Compression for Fujitsu CA Datacom - DB CA Datacom CA Datacom - AD CA Datacom - Server CA CIS CA Common Services for z/OS CA 90s Services CA Database Management Solutions for DB2 for z/OS CA Common Product Services Component CA Common Services CA ecoMeter Server Component FOC CA Easytrieve Report Generator for Common Services CA Infocai Maintenance CA IPC Unicenter CA-JCLCheck Common Component CA Mainframe VM Product Manager CA Chorus Software Manager CA On Demand Portal CA Service Desk Manager - Unified Self Service CA PAM Client for Linux for zSeries CA Mainframe Connector for Linux on System z CA Graphical Management Interface CA Web Administrator for Top Secret CA CA- Xpertware CA Datacom/AD

Issue/Introduction

Description:

In the previous version of ENF (ie. r1.0), before Datacom/AD was used for the database, the CAS9DB QUERY utility was used to obtain information relating to a specific event. One useful piece of information was USER. Where USER was the user belonging to the JOBNAME causing the event.

Starting with ENF r12, when Datacom/AD started to be utilized as the database of choice, running an SQL job (PGM=DBSQLPR) with USER as one of the SELECT criteria, the user belonging to the JOBNAME is not returned. Instead the ENF AUTHID CAS9ENFS is returned.

Example:

//SQL EXEC PGM=DBSQLPR,REGION=0M,PARM='AUTHID=CAS9ENFS'
SELECT DSN,DATE,TIME,JOBNAME,USER
FROM CAS9ENFS.DSCLOSE;

Solution:

When coding the SELECT statement enclose USER in double quotes as follows:

//SQL EXEC PGM=DBSQLPR,REGION=0M,PARM='AUTHID=CAS9ENFS'
SELECT DSN,DATE,TIME,JOBNAME,"USER"
FROM CAS9ENFS.DSCLOSE;

Environment

Release: CA90SV00200-14.1-Common Services-for z/OS
Component: