Command logging for System Automation for z/OS - a good audit toolHello, This is John Arnesen with NetView and System Automation level 2 support. Are you looking for a way to audit who issues System Automation commands? Or just want to make a notation in the netlog when a System Automation command is issued? The INGCNTL command can do that for you. Issue command: INGCNTL SET COMMAND_LOGGING=YES and every time a SA command is issued, a AOF705I message will be written to the netlog containing the command and the options used along with the userid or autotask that issued the command. Here is an example of what the AOF705I shows:
AOF705I USER1 issued command INGREQ with MYAPL/APL/SAT1 REQ=START SCOPE=ONLY
VERIFY=YES SOURCE=OPERATOR PRI=LOW PRECHECK=YES
AOF705I USER1 issued command INGIMS with IMS3CTL/APL/KEYC REQ=CMD CMD=/DIS
There is more information on this in Section 2.1.3 Command Logging in the User's Guide
http And here is more information on the INGCNTL command in section 2.1.24 INGCNTL in the Programmer's Reference
http
|
Welcome to the System z Management Blog, where you can read the perspectives from System z experts. This Blog provides insights into the System z solution, as well as technical details about specific IBM products. 
I forgot to say that the INGCNTL command does not survive a recycle so it will have to be issued each time the Agent is started. <br /> You can do this by adding a auxInitCmd to your CNMSTGEN/CNMSTUSR like this: <br /> AUXINITCMD.SACMDLOG= INGCNTL SET COMMAND_LOGGING=YES <div> </div> That way the INGCNTL command will be run each time the Agent is initialized. <br /> John
Hi John, <div> </div> This question is out of this topics' context,but could you please let me know if there is any reference document for SA specific to WebSphere Application server(v7/v8) on z/OS.Tried searching on various IBM sites but still no luck so far. <div> </div> Thanks <br /> Prashant
Hello Prashant, <br /> Can you tell me a little more about what you are trying to do with Websphere and System Automation? <br /> Are you asking about SA on a distributed platform or on a z/OS platform? <br /> Are you looking to control Websphere (start/stop/monitor) or use it for something else. <div> </div> Give me some more information and I will see what I can find out. <div> </div> Thanks, <br /> John
Hi John, <div> </div> We are trying to setup SA for WebSphere(start/stop/monitor) on z/OS platform.Currently we have allowed SA to control the Daemon only,and not the servers as it is managed by WebSphere internally.So I was wondering if there is any best practices that we can follow to implement SA specific to WebSphere App server on z/OS. <div> </div> Thanks <br /> Prashant
Hi Prashant, <br /> maybe it is worthwhile to have a look at the shipped *WEBSPHERE Add-on Sample Policy, it describes a basic WebSphere V7.0 environment. <br /> Hope this helps. <br /> Regards, Hans