HCL Workload Automation for Z auditing package

There are three ways to start the HCL Workload Automation for Z auditing functions:

Invoking it interactively (option 10.1 from the main menu)
Submitting from the dialog a batch job (option 10.2 from the main menu)
Submitting a batch job outside the dialog

The sample library member EQQAUDIB contains a job that is customized at installation time and that you can submit outside the dialog to start the auditing function in those cases when either of the two simpler methods cannot be used. The first two methods are useful when there is an urgency to create reports from all the auditing data sets (job-tracking, track-log, or extended-auditing). This facilitates searching for answers to critical questions without having to spend too much time to examine the input records with the aid of the mappings listed in the Diagnosis Guide and Reference. The third way is useful in case of a planned utilization: many installations have a need to create and store auditing trails for a set period of time. In this case, an HCL Workload Automation for Z auditing job (copied from the EQQAUDIB CUSTOMIZED) can be defined to run automatically after every daily plan EXTEND or REPLAN, using the data set referenced by EQQTROUT or EQQDBOUT as input.

Even if you are not required to create an auditing trail regularly, the report generated can provide quick answers in determining who in your organization requested a function that caused some business application to fail, or to trace the processing of a job that failed and was rerun many times. If your AUDIT initialization statement specifies all data for JS update requests, you can use the auditing report to compare against the master JCL to determine exactly which JCL statements were changed.

The auditing program reads the JTARC or DBARC data set and the currently open EQQJTnn or EQQDBnn in their entirety. Thus the report produced contains almost always some amount of obsolete data generated by the old records still visible in the open data set and not yet overwritten by new data. Any information appearing in the auditing report after this header is old or residual, and you must very carefully review timestamps when using it. Note that this old information is also included in the statistical information at the end of of the EQQAUDIT report. If accurate statistics are required, they can be obtained by generating the report using the EQQTROUT dataset (INPUT TRL).

EQQAUDIT report sample: header page, EQQAUDIT report sample: report pages, and EQQAUDIT report sample: summary page show the parts of the report that you can generate using the auditing package. The level of reporting for database updates is dependent on the values you specify in the AUDIT initialization statement.

Figure 1. EQQAUDIT report sample: header page

 DATE/TIME OF THIS RUN: 110316 18.02



 *****************************************************************
 *            SAMPLE OPC/ESA AUDIT/DEBUG REPORT                  *
 *             P R O G R A M  P A R A M E T E R S                *
 *****************************************************************
 * INPUT SOURCE    : TRL                                         *
 * SEARCH-STRING   :                                             *
 * START DATE      :                                             *
 * START TIME      :                                             *
 * END DATE        :                                             *
 * END TIME        :                                             *
 *****************************************************************


 ****************************************************
 * LINES INSERTED BY PROGRAM ARE MARKED '=====>'    *
 * UNKNOWN FIELD VALUES ARE PRINTED AS '?'          *
 * SUMMARY OF SELECTED RECORDS PRINTED ON LAST PAGE *
 ****************************************************

Figure 2. EQQAUDIT report sample: report pages

  DATE/TIME OF THIS RUN: 110316 18.02                                                                                       

 =============> NOW READING FROM EQQTROUT
03/07 11.19.58 CP   UPDT BY PERTICA  MCP MODIFY              APPL: APPLPLUGINS       IA: 110224 1210  PRTY: 5
                                       - OPNO:001  TYPE: EX-COMMAND ISSUED
 03/07 11.19.59 25   SCHD BY OPC      JOBNAME: PLUGIN    AD: APPLPLUGINS       OCC IA: 1102241210 TOKEN: 0000000000000000
 03/07 11.19.59 29                    PROCESSED PC-OCCURRENCE TOKEN: C76158BA53524889 CALLER: WSA REQUEST TIMESTAMP: 0111066F11195946
                                                   CLEANUPEVENT  USER  ADID: APPLPLUGINS      OP: 001 SCHENV:
 03/07 11.19.59 CP   UPDT BY OPC_WSA  OP.ZCE2_001 IN APPLPLUGINS      IS SET TO S   JOBNAME: PLUGIN
 03/07 11.19.59 CP                    OP.ZCE2_001 IN AD/IA: APPLPLUGINS      3902241210  JOBNAME: PLUGIN
 03/07 11.19.59 29                    PROCESSED 2O-DESTINATION NAME: ITAVP2   WS STATUS: A OP SYSTEM: WINDOWS
 03/07 11.19.59 29                    PROCESSED 2P-OCCURRENCE TOKEN: C76158BA53524889 OP: 001 WSNAME: ZCE2
 03/07 11.19.59 CP   UPDT BY PX2      OP.ZCE2_001 IN APPLPLUGINS      IS SET TO E   JOBNAME: PLUGIN   ERROR CODE: OSUB RESTART BYPASS
 03/07 11.19.59 CP                    OP.ZCE2_001 IN AD/IA: APPLPLUGINS      3902241210  JOBNAME: PLUGIN  R CODE: OSUB RESTART BYPASS
 03/07 11.20.00 29                    PROCESSED 2F-OCCURRENCE TOKEN: C76158BA53524889 OP: 001 WSNAME: ZCE2
 03/07 11.20.02 JS   READ BY PERTICA  KEY: APPLPLUGINS     1102241210  OPNO:001  JOBNAME: PLUGIN    WSNAME: ZCE2  READ FROM: JS-FILE
                                        //TASKTYPE=ws
                                        </jsdl:application> </jsdl:jobDefinition>
 03/07 11.21.47 JS   READ BY PERTICA  KEY: APPLPLUGINS     1102241210  OPNO:001  JOBNAME: PLUGIN    WSNAME: 
 03/07 11.21.52 JS   DLET BY PERTICA  KEY: APPLPLUGINS     1102241210  OPNO:001
 03/07 11.21.53 JS   READ BY PERTICA  KEY: APPLPLUGINS     1102241210  OPNO:001  JOBNAME: PLUGIN    WSNAME: 
 03/07 11.22.25 CP   UPDT BY PERTICA  MCP MODIFY              APPL: APPLPLUGINS       IA: 110224 1210  PRTY: 5
                                       - OPNO:001  TYPE: OP. ADDED          JOBNAME: PLUGIN    WSID: ZCE2  USERDATA:                 
                                       - OPNO:001  TYPE: JOB OPTIONS        JOBNAME: PLUGIN    TIMEJOB: NO  AUTOSUB: YES CONDRJ: NO
                                       - OPNO:001  TYPE: DELETE EXTENDED INFO
                                       - OPNO:001  TYPE: OP. ADDED          JOBNAME: PLUGIN    WSID: ZCE2  USERDATA:                 
                                       - OPNO:001  TYPE: JOB STATUS       NEW OP. STATUS: R
 03/07 11.22.27 CP   UPDT BY PERTICA  MCP MODIFY              APPL: APPLPLUGINS       IA: 110224 1210  PRTY: 5
                                       - OPNO:001  TYPE: EX-COMMAND ISSUED
 03/07 11.22.27 25   SCHD BY OPC      JOBNAME: PLUGIN    AD: APPLPLUGINS       OCC IA: 1102241210 TOKEN: 0000000000000000
 03/07 11.22.27 29                    PROCESSED PC-OCCURRENCE TOKEN: C76158BA53524889 CALLER: WSA REQUEST TIMESTAMP: 0111066F11222728
                                                   CLEANUPEVENT  USER  ADID: APPLPLUGINS      OP: 001 SCHENV:
 03/07 11.22.27 CP   UPDT BY OPC_WSA  OP.ZCE2_001 IN APPLPLUGINS      IS SET TO S   JOBNAME: PLUGIN
 03/07 11.22.27 CP                    OP.ZCE2_001 IN AD/IA: APPLPLUGINS      3902241210  JOBNAME: PLUGIN
 03/07 11.22.27 29                    PROCESSED 2P-OCCURRENCE TOKEN: C76158BA53524889 OP: 001 WSNAME: ZCE2
 03/07 11.22.27 CP   UPDT BY PX2      OP.ZCE2_001 IN APPLPLUGINS      IS SET TO E   JOBNAME: PLUGIN   ERROR CODE: OSUB RESTART BYPASS
 03/07 11.22.27 CP                    OP.ZCE2_001 IN AD/IA: APPLPLUGINS      3902241210  JOBNAME: PLUGIN  R CODE: OSUB RESTART BYPASS
 03/07 11.22.27 29                    PROCESSED 2F-OCCURRENCE TOKEN: C76158BA53524889 OP: 001 WSNAME: ZCE2
 03/07 11.29.19 29                    PROCESSED NF-HANDSHAKE EVENT.  PULSE FROM TRACKER ON: Z/OS AT DEST: ********
 03/07 11.32.24 36                    BACKUP WAS TAKEN.  DDNAME OF BACKUP CP: EQQCP1DS  DDNAME OF JT: EQQJT04
 03/07 11.32.43 37                    EDP  TYPE DATA HAS BEEN LOGGED
 03/07 11.32.43 20                    JOB TRACKING START  EVENT
 =============> EOF REACHED ON EQQTROUT

Figure 3. EQQAUDIT report sample: summary page

DATE/TIME OF THIS RUN: 170316 18.02                                                   PAGE: 0002


 ***************************************************
 *                               *RECORDS * EVENTS *
 *     E V E N T  T Y P E     NO *  READ  *SELECTED*
 ***************************************************
 * DAILY PLAN STATUS  RECORD  01 * 000001 * 000000 *
 * DAILY PLAN WORK STATIONS   02 * 000010 * 000000 *
 * DAILY PLAN OCC/OPER/CONDS  03 * 000020 * 000000 *
 * JOB TRACKING START         20 * 000054 * 000054 *
 * MANUAL OPERATIONS          23 * 000132 * 000132 *
 * MODIFY CURRENT PLAN        24 * 000176 * 000176 *
 * OPERATION SCHEDULED        25 * 000049 * 000049 *
 * FEEDBACK DATA              28 * 000004 * 000004 *
 * AUTOMATIC OPERATIONS       29 * 002327 * 002327 *
 * DATA BASE UPDATE           32 * 000263 * 000227 *
 * BACKUP LOG RECORD          36 * 000056 * 000056 *
 * DATA LOG RECORD               * 000056 * 000056 *
 * MULTI-RECORD EVENTS           * 000006 * 000002 *
 ***************************************************


 ************************************************************
 *  MCP PERFORMANCE *  NO OF  *   E L A P S E D   T I M E   *
 *  TYPE OF UPDATE  * UPDATES *  M I N  *  M A X  *  A V G  *
 ************************************************************
 * MCP ADD          *  000001 *   0.01  *   0.01  *   0.01  *
 * MCP MODIFY       *  000066 *   0.01  *   0.22  *   0.01  *
 * MCP CHANG WS     *  000001 *   0.03  *   0.03  *   0.03  *
 * MCP VARY WS      *  000001 *   0.01  *   0.01  *   0.01  *
 ************************************************************

 LONGEST MCP-EVENTS:

 03/09 12.03.00 CP  UPDT BY PERTICA  MCP MODIFY  0.22SEC  APPL: APPLPLUGINS   IA: 170224 1210  PRTY: 5
 03/11 11.47.49 CP  UPDT BY PERTICA  MCP MODIFY  0.07SEC  APPL: APPLCPU1      IA: 170224 1111  PRTY: 5
 03/09 16.39.22 CP  UPDT BY PERTICA  MCP MODIFY  0.05SEC  APPL: APPLPLUGINS   IA: 170224 1210  PRTY: 5

           ***** END OF REPORT *****