Customizing the audit facility for FM/Db2
FM/Db2 can write audit log records to either SMF or an audit log data set.
If auditing is not required, you should:
- Set AUDIT=NONE in the FMN2SSDM macro specification of the FMN2POPT
module. There is one FMN2SSDM specification for each Db2® system accessed by FM/Db2. Specify AUDIT=NONE
for each FMN2SSDM specification where auditing is not required.
See AUDIT for more information.
- Set SMFNO=0 in the FMN0POPI macro specification of the FMN2POPT module. See SMFNO for more information.
You can skip the customization described in the rest of this chapter.
File Manager provides two different methods (FMN2POPT-controlled and SAF-controlled audit) for controlling whether audit records are written for FM/Db2. These are described in detail in Alternatives for controlling FM/Db2 auditing.
Use the checklist to determine the customization required for File Manager Db2® audit facility.
Audit customization choice | Decision (Yes|No|Not applicable) |
---|---|
1. Control auditing using the FMN2POPT options module | |
2. Control auditing using SAF rules and a member in SYS1.PARMLIB | |
3. Control auditing using SAF rules, without any changes to SYS1.PARMLIB | |
4. Audit records are to be written to a data set | |
5. Audit records are to be written to SMF |
For choices 1 to 3, you should answer YES for one choice only. Mark the other two choices as 'Not applicable'.
If you answer YES for choice 1, you can answer YES for one of choices 4 and 5. Mark the other choice as 'Not applicable'.
If you answer YES for choices 2 or 3, you can answer YES for one or both of choices 4 and 5. If you answer YES for both choices you are implementing dual-logging, which is only available with SAF-controlled auditing.
Once you have completed the checklist, use the table below
to identify the customization that is required for each customization
choice. Only complete the customization if your decision was YES
in
the checklist.
Customization choice | Sections to complete |
---|---|
1. Control auditing using the FMN2POPT options module | |
2. Control auditing using SAF rules and a member in SYS1.PARMLIB | |
3. Control auditing using SAF rules, without any changes to SYS1.PARMLIB | |
4. Audit records are to be written to a data set | |
5. Audit records are to be written to SMF |