Monitoring TSO/E commands

You can monitor the TSO/E commands users issue and record the number of times a user issues a specific command or subcommand. System Management Facilities (SMF) records information about TSO/E commands in a type 32 SMF record. You can write an application to process and report on the information that SMF records. For example, you can:

Keep track of and compare how frequently certain commands at your installation are used. You may want to provide better performance for the more commonly used commands by placing them in LPALIB.
Keep track of the number of times users issue TSO/E commands so you can bill users for their computer use.
Audit the commands users issue to ensure they do not violate security practices at your installation.

By default, SMF records contain certain statistics about most TSO/E commands. You can record information about additional TSO/E commands, such as MVSSERV, or keep information about certain TSO/E commands from being recorded. For information about how to add or delete commands, see .

You may also want to record additional information about each TSO/E command, such as the number of TPUTs and TGETs that are issued for each command. Monitoring the number of TPUTs and TGETs allows you to keep track of terminal activity. To record additional information about each command, use the SYS parameter in SYS1.PARMLIB member SMFPRMxx. For more information about using SMFPRMxx, see .

Note that you cannot use SMF to restrict users from using commands. For information about limiting commands, see Protecting the resources TSO/E users can access.