Audit data set configuration
The format of the audit log data set name is determined by the setting of the AUDITHLQ parameter in the FMN0POPI definition in FMN2POPT.
The following data set name formats may be generated:
userid.FMN2AUD.<ssid>.Dyymmdd.Thhmmss(when AUDITHLQ= (blank))audithlq.FMN2AUD.<ssid>.Dyymmdd.Thhmmss(when AUDITHLQ=audithlq)qual1.<qual2.><qual3.>Dyymmdd.Thhmmss(when AUDITHLQ=qual1.<qual2.><qual3>)
where:
- audithlq
- Any 1-8 character constant that is valid in the context of a data set name.
- ssid
- The name of the currently connected (local) Db2® system.
- userid
- The user ID creating the data set.
- Dyymmdd
- The date of the activity.
- Thhmmss
- The time of the activity.
When AUDITHLQ contains one or more periods, the AUDITHLQ value is treated as a data set prefix, with one, two or three levels. Each level of the prefix can be:
- XXX
- Any 1-8 character constant that is valid in the context of a data set name.
- &&PREFIX
- Indicates that the user's TSO prefix should by used. This is null if TSO NOPREFIX is in effect and, after substitution, the appropriate level of the audit log data set name prefix is also null.
- &&USER
- Indicates that the user's logonid (ISPF system variable ZUSER, stored in the shared pool) should be used.
- &&UID
- Indicates that the user's TSO prefix should be used, when the value is non-blank. When TSO NOPREFIX is in effect, the user's TSO logonid (ISPF system variable ZUSER, stored in the shared pool) should be used.
- &&FUNCOD
- Indicates that the File Manager internal function code should be used. Specifying this parameter allows the File Manager function that generated the audit log data set to be included in the audit log data set name.
- &&SSID
- Indicates that the currently connected (local) Db2® subsystem name should be used. This data
set can be printed using the FM/Db2 Print Audit Trail utility, (option
3.10 from the FM/Db2 Primary Option menu).
In this case, audit data sets are produced for each user, and are subject to the usual rules controlling user data sets. For this reason, if you intend that audit logging should always take place and be reported on, it is suggested that you select
AUDIT=(REQUIRED,SMF)in your FMN2SSDM macro.
Set the AUDITHLQ parameter in the FMN0POPI macro to the required value, based on your site's requirements. See AUDITHLQ for more information and examples.
You can print the information in an audit data set using the FM/Db2 Print Audit Trail utility. To do this select option 3.10 from the FM/Db2 Primary Option menu.