There are three ways
to start the
HCL Workload Automation for Z auditing
functions:
Invoking it interactively (option 10.1 from the main menu)
Submitting from the dialog a batch job (option 10.2 from the main
menu)
Submitting a batch job outside the dialog
The sample library member EQQAUDIB contains a job that is customized
at installation time and that you can submit outside the dialog to
start the auditing function in those cases when either of the two
simpler methods cannot be used. The first two methods are useful when
there is an urgency to create reports from all the auditing data sets
(job-tracking, track-log, or extended-auditing). This facilitates
searching for answers to critical questions without having to spend
too much time to examine the input records with the aid of the mappings
listed in the
Diagnosis Guide and Reference . The third way
is useful in case of a planned utilization: many installations have
a need to create and store auditing trails for a set period of time.
In this case, an
HCL Workload Automation for Z auditing
job (copied from the EQQAUDIB CUSTOMIZED) can be defined to run automatically
after every daily plan EXTEND or REPLAN, using the data set referenced
by EQQTROUT or EQQDBOUT as input.
Even if you are not required to create an auditing
trail regularly, the report generated can provide quick answers in
determining who in your organization requested a function that caused
some business application to fail, or to trace the processing of a
job that failed and was rerun many times. If your AUDIT initialization
statement specifies all data for JS update requests, you can use the
auditing report to compare against the master JCL to determine exactly
which JCL statements were changed.
The auditing program reads the JTARC or DBARC data set and the
currently open EQQJTnn or EQQDBnn in their entirety.
Thus the report produced contains almost always some amount of obsolete
data generated by the old records still visible in the open data set
and not yet overwritten by new data. Any information appearing in
the auditing report after this header is old or residual, and you
must very carefully review timestamps when using it. Note that this
old information is also included in the statistical information at
the end of of the EQQAUDIT report. If accurate statistics are required,
they can be obtained by generating the report using the EQQTROUT dataset
(INPUT TRL).
Figure 1 . EQQAUDIT
report sample: header page
DATE/TIME OF THIS RUN: 110316 18.02
*****************************************************************
* SAMPLE OPC/ESA AUDIT/DEBUG REPORT *
* P R O G R A M P A R A M E T E R S *
*****************************************************************
* INPUT SOURCE : TRL *
* SEARCH-STRING : *
* START DATE : *
* START TIME : *
* END DATE : *
* END TIME : *
*****************************************************************
****************************************************
* LINES INSERTED BY PROGRAM ARE MARKED '=====>' *
* UNKNOWN FIELD VALUES ARE PRINTED AS '?' *
* SUMMARY OF SELECTED RECORDS PRINTED ON LAST PAGE *
****************************************************
Figure 2 . EQQAUDIT
report sample: report pages
DATE/TIME OF THIS RUN: 110316 18.02
=============> NOW READING FROM EQQTROUT
03/07 11.19.58 CP UPDT BY PERTICA MCP MODIFY APPL: APPLPLUGINS IA: 110224 1210 PRTY: 5
- OPNO:001 TYPE: EX-COMMAND ISSUED
03/07 11.19.59 25 SCHD BY OPC JOBNAME: PLUGIN AD: APPLPLUGINS OCC IA: 1102241210 TOKEN: 0000000000000000
03/07 11.19.59 29 PROCESSED PC-OCCURRENCE TOKEN: C76158BA53524889 CALLER: WSA REQUEST TIMESTAMP: 0111066F11195946
CLEANUPEVENT USER ADID: APPLPLUGINS OP: 001 SCHENV:
03/07 11.19.59 CP UPDT BY OPC_WSA OP.ZCE2_001 IN APPLPLUGINS IS SET TO S JOBNAME: PLUGIN
03/07 11.19.59 CP OP.ZCE2_001 IN AD/IA: APPLPLUGINS 3902241210 JOBNAME: PLUGIN
03/07 11.19.59 29 PROCESSED 2O-DESTINATION NAME: ITAVP2 WS STATUS: A OP SYSTEM: WINDOWS
03/07 11.19.59 29 PROCESSED 2P-OCCURRENCE TOKEN: C76158BA53524889 OP: 001 WSNAME: ZCE2
03/07 11.19.59 CP UPDT BY PX2 OP.ZCE2_001 IN APPLPLUGINS IS SET TO E JOBNAME: PLUGIN ERROR CODE: OSUB RESTART BYPASS
03/07 11.19.59 CP OP.ZCE2_001 IN AD/IA: APPLPLUGINS 3902241210 JOBNAME: PLUGIN R CODE: OSUB RESTART BYPASS
03/07 11.20.00 29 PROCESSED 2F-OCCURRENCE TOKEN: C76158BA53524889 OP: 001 WSNAME: ZCE2
03/07 11.20.02 JS READ BY PERTICA KEY: APPLPLUGINS 1102241210 OPNO:001 JOBNAME: PLUGIN WSNAME: ZCE2 READ FROM: JS-FILE
//TASKTYPE=ws
</jsdl:application> </jsdl:jobDefinition>
03/07 11.21.47 JS READ BY PERTICA KEY: APPLPLUGINS 1102241210 OPNO:001 JOBNAME: PLUGIN WSNAME:
03/07 11.21.52 JS DLET BY PERTICA KEY: APPLPLUGINS 1102241210 OPNO:001
03/07 11.21.53 JS READ BY PERTICA KEY: APPLPLUGINS 1102241210 OPNO:001 JOBNAME: PLUGIN WSNAME:
03/07 11.22.25 CP UPDT BY PERTICA MCP MODIFY APPL: APPLPLUGINS IA: 110224 1210 PRTY: 5
- OPNO:001 TYPE: OP. ADDED JOBNAME: PLUGIN WSID: ZCE2 USERDATA:
- OPNO:001 TYPE: JOB OPTIONS JOBNAME: PLUGIN TIMEJOB: NO AUTOSUB: YES CONDRJ: NO
- OPNO:001 TYPE: DELETE EXTENDED INFO
- OPNO:001 TYPE: OP. ADDED JOBNAME: PLUGIN WSID: ZCE2 USERDATA:
- OPNO:001 TYPE: JOB STATUS NEW OP. STATUS: R
03/07 11.22.27 CP UPDT BY PERTICA MCP MODIFY APPL: APPLPLUGINS IA: 110224 1210 PRTY: 5
- OPNO:001 TYPE: EX-COMMAND ISSUED
03/07 11.22.27 25 SCHD BY OPC JOBNAME: PLUGIN AD: APPLPLUGINS OCC IA: 1102241210 TOKEN: 0000000000000000
03/07 11.22.27 29 PROCESSED PC-OCCURRENCE TOKEN: C76158BA53524889 CALLER: WSA REQUEST TIMESTAMP: 0111066F11222728
CLEANUPEVENT USER ADID: APPLPLUGINS OP: 001 SCHENV:
03/07 11.22.27 CP UPDT BY OPC_WSA OP.ZCE2_001 IN APPLPLUGINS IS SET TO S JOBNAME: PLUGIN
03/07 11.22.27 CP OP.ZCE2_001 IN AD/IA: APPLPLUGINS 3902241210 JOBNAME: PLUGIN
03/07 11.22.27 29 PROCESSED 2P-OCCURRENCE TOKEN: C76158BA53524889 OP: 001 WSNAME: ZCE2
03/07 11.22.27 CP UPDT BY PX2 OP.ZCE2_001 IN APPLPLUGINS IS SET TO E JOBNAME: PLUGIN ERROR CODE: OSUB RESTART BYPASS
03/07 11.22.27 CP OP.ZCE2_001 IN AD/IA: APPLPLUGINS 3902241210 JOBNAME: PLUGIN R CODE: OSUB RESTART BYPASS
03/07 11.22.27 29 PROCESSED 2F-OCCURRENCE TOKEN: C76158BA53524889 OP: 001 WSNAME: ZCE2
03/07 11.29.19 29 PROCESSED NF-HANDSHAKE EVENT. PULSE FROM TRACKER ON: Z/OS AT DEST: ********
03/07 11.32.24 36 BACKUP WAS TAKEN. DDNAME OF BACKUP CP: EQQCP1DS DDNAME OF JT: EQQJT04
03/07 11.32.43 37 EDP TYPE DATA HAS BEEN LOGGED
03/07 11.32.43 20 JOB TRACKING START EVENT
03/07 11.32.43 29 PROCESSED NF-HANDSHAKE EVENT. REQUEST BY TRACKER ON: Z/OS WITH ID: HWSZ600
03/07 11.32.43 29 PROCESSED IJ-SUBMIT SYNCHR. WS:CPU1 WS SEQ: 00006 EVDS SEQ: 00006 REQ: 098
03/07 11.32.43 29 PROCESSED NF-HANDSHAKE EVENT. CONFIRM BY TRACKER ON: Z/OS AT DEST: ********
03/07 11.32.43 29 PROCESSED NF-HANDSHAKE EVENT. PULSE FROM TRACKER ON: Z/OS AT DEST: ********
03/07 11.32.46 29 DISCARDED 2O-DESTINATION NAME: CWSDDEST WS STATUS: A OP SYSTEM: Z_OS
03/07 11.32.47 29 DISCARDED 2O-DESTINATION NAME: NEWTEST4 WS STATUS: O OP SYSTEM:
03/07 11.32.47 29 PROCESSED 2O-DESTINATION NAME: CWSGDEST WS STATUS: A OP SYSTEM: Z_OS
DATE/TIME OF THIS RUN: 110316 18.02
03/07 11.32.48 29 PROCESSED 2I-BIND OK TOKEN: C76690B9DF9C0A47 OP: 001 REMOTE OCC IA: 110224 1111
03/07 11.32.48 29 PROCESSED 2S-OCCURRENCE TOKEN: C76690B9DF9C0A47 OP: 001 WSNAME: JOB NAME:
03/11 11.48.31 CP UPDT BY PERTICA MCP MODIFY APPL: APPLCPU1 IA: 010311 1111 PRTY: 5
- OPNO:001 TYPE: EX-COMMAND ISSUED
03/11 11.48.31 25 SCHD BY OPC JOBNAME: VPJOB1 AD: APPLCPU1 OCC IA: 0103111111 TOKEN: 0000000000000000
03/11 11.48.31 29 PROCESSED PC-OCCURRENCE TOKEN: C7742F948FA8B149 CALLER: WSA REQUEST TIMESTAMP: 0111070F11483174
CLEANUPEVENT USER ADID: APPLCPU1 OP: 001 SCHENV:
03/11 11.48.31 CP UPDT BY OPC_WSA OP.CPU1_001 IN APPLCPU1 IS SET TO S JOBNAME: VPJOB1
03/11 11.48.31 CP OP.CPU1_001 IN AD/IA: APPLCPU1 2903111111 JOBNAME: VPJOB1
03/11 11.48.31 29 PROCESSED IJ-SUBMIT JCL AD/IA: APPLCPU1 0103111111 VPJOB1 (JOB00055) SEQ: 000008
03/11 11.48.31 29 PROCESSED A1-JOB CARD READ VPJOB1 (JOB00055) AT: 11.48.31.82
03/11 11.48.31 29 PROCESSED A2-JOB START VPJOB1 (JOB00055) AT: 11.48.31.87 ON NODE: ZDIS1013 CM-DATA: NO
03/11 11.48.31 29 PROCESSED A3-STEP END VPJOB1 (JOB00055) AT: 11.48.31.93 PRSTEP: S1 CODE: 0000
03/11 11.48.32 29 PROCESSED A3-STEP END VPJOB1 (JOB00055) AT: 11.48.32.05 PRSTEP: S2 CODE: 0000
03/11 11.48.32 29 PROCESSED A3-JOB COMPLETE VPJOB1 (JOB00055) AT: 11.48.32.05 CODE: 0000 CM-DATA: NO
03/11 11.48.32 28 FEEDBACK FOR AD: APPLCPU1 OPS UPDATED: 000 FOR DURATION: 000 FOR DEADLINE: 000
03/11 11.48.32 CP UPDT BY OPC_JT OP.CPU1_001 IN APPLCPU1 IS SET TO C JOBNAME: VPJOB1 RESTART BYPASS
03/11 11.48.32 CP OP.CPU1_001 IN AD/IA: APPLCPU1 2903111111 JOBNAME: VPJOB1 RESTART BYPASS
03/11 11.48.32 29 PROCESSED A3-JOB TERMINATE VPJOB1 (JOB00055) AT: 11.48.32.07 CM-DATA: NO
03/11 11.49.31 29 PROCESSED 0W-WKST EVENT. WSID: FTW1 LINK STATUS: U WS STATUS: FULLY LINKED: LIMIT:
03/11 11.50.00 36 BACKUP WAS TAKEN. DDNAME OF BACKUP CP: EQQCP2DS DDNAME OF JT: EQQJT02
=============> EOF REACHED ON EQQTROUT
Figure 3 . EQQAUDIT
report sample: summary page
DATE/TIME OF THIS RUN: 170316 18.02 PAGE: 0002
***************************************************
* *RECORDS * EVENTS *
* E V E N T T Y P E NO * READ *SELECTED*
***************************************************
* DAILY PLAN STATUS RECORD 01 * 000001 * 000000 *
* DAILY PLAN WORK STATIONS 02 * 000010 * 000000 *
* DAILY PLAN OCC/OPER/CONDS 03 * 000020 * 000000 *
* JOB TRACKING START 20 * 000054 * 000054 *
* MANUAL OPERATIONS 23 * 000132 * 000132 *
* MODIFY CURRENT PLAN 24 * 000176 * 000176 *
* OPERATION SCHEDULED 25 * 000049 * 000049 *
* FEEDBACK DATA 28 * 000004 * 000004 *
* AUTOMATIC OPERATIONS 29 * 002327 * 002327 *
* DATA BASE UPDATE 32 * 000263 * 000227 *
* BACKUP LOG RECORD 36 * 000056 * 000056 *
* DATA LOG RECORD * 000056 * 000056 *
* MULTI-RECORD EVENTS * 000006 * 000002 *
***************************************************
************************************************************
* MCP PERFORMANCE * NO OF * E L A P S E D T I M E *
* TYPE OF UPDATE * UPDATES * M I N * M A X * A V G *
************************************************************
* MCP ADD * 000001 * 0.01 * 0.01 * 0.01 *
* MCP MODIFY * 000066 * 0.01 * 0.22 * 0.01 *
* MCP CHANG WS * 000001 * 0.03 * 0.03 * 0.03 *
* MCP VARY WS * 000001 * 0.01 * 0.01 * 0.01 *
************************************************************
LONGEST MCP-EVENTS:
03/09 12.03.00 CP UPDT BY PERTICA MCP MODIFY 0.22SEC APPL: APPLPLUGINS IA: 170224 1210 PRTY: 5
03/11 11.47.49 CP UPDT BY PERTICA MCP MODIFY 0.07SEC APPL: APPLCPU1 IA: 170224 1111 PRTY: 5
03/09 16.39.22 CP UPDT BY PERTICA MCP MODIFY 0.05SEC APPL: APPLPLUGINS IA: 170224 1210 PRTY: 5
***** END OF REPORT *****