INQUIRE SECDISCOVERY
6.2 and later Applies to 6.2 and later.
Retrieves information about the current state of CICS® security discovery.
Syntax
Warning: System commands are powerful as they
provide information about the state of the system and allow changes to be made to it. System
commands should be used only by authorized applications and users.
Activate security checks on commands by specifying the XCMD system initialization parameter and by ensuring that command security checking is active for the transaction (either by specifying CMDSEC(YES) on the TRANSACTION resource definition or by specifying ALWAYS on the CMDSEC system initialization parameter).
Conditions: NOTAUTH
NOHANDLE, RESP, and
RESP2 are common options that can be added to all EXEC CICS
commands to process error conditions. They are not explicitly included in the command syntax diagram
and option descriptions. For information about these common options and EXEC CICS
command syntax, see EXEC CICS command format and programming considerations. For more information
about the use of CVDAs, see CICS-value data areas (CVDAs).
Description
Use the INQUIRE SECDISCOVERY command to retrieve information about CICS security discovery.
Options
- STATUS(cvda)
- Returns a CVDA value indicating whether security discovery is active or not. CVDA values are as follows:
- ON
- Security discovery is active.
- OFF
- Security discovery is not active.
- LASTSECDTIME(data-area)
- Returns the time stamp when the latest resource access was recorded, in the absolute time (ABSTIME) format. For more information about the ABSTIME value and how to transform it into other formats, see FORMATTIME.
- LASTWRITTIME(data-area)
- Returns the time stamp when security discovery data (SDD) was last written to the log stream, in the absolute time (ABSTIME) format. For more information about the ABSTIME value and how to transform it into other formats, see FORMATTIME.
- SECDCOUNT(data-area)
- Returns the total number of resource access requests that have been recorded by security discovery, in a fullword binary value.
- NEWSECDCOUNT(data-area)
- Returns the number of resource access requests that have been recorded by security discovery since the data was last written out, in a fullword binary value.
- CMD(cvda)
- Returns a CVDA value indicating whether resources protected by the XCMD system initialization parameter are being discovered. CVDA values are as follows:
- DISCOVER
- Resource access requests are being discovered.
- NODISCOVER
- Resource access requests are not being discovered.
- DB2(cvda)
- Returns a CVDA value indicating whether resources protected by the XDB2 system initialization parameter are being discovered. CVDA values are as follows:
- DISCOVER
- Resource access requests are being discovered.
- NODISCOVER
- Resource access requests are not being discovered.
- DCT(cvda)
- Returns a CVDA value indicating whether resources protected by the XDCT system initialization parameter are being discovered. CVDA values are as follows:
- DISCOVER
- Resource access requests are being discovered.
- NODISCOVER
- Resource access requests are not being discovered.
- FCT(cvda)
- Returns a CVDA value indicating whether resources protected by the XFCT system initialization parameter are being discovered. CVDA values are as follows:
- DISCOVER
- Resource access requests are being discovered.
- NODISCOVER
- Resource access requests are not being discovered.
- HFS(cvda)
- Returns a CVDA value indicating whether resources protected by the XHFS system initialization parameter are being discovered. CVDA values are as follows:
- DISCOVER
- Resource access requests are being discovered.
- NODISCOVER
- Resource access requests are not being discovered.
- JCT(cvda)
- Returns a CVDA value indicating whether resources protected by the XJCT system initialization parameter are being discovered. CVDA values are as follows:
- DISCOVER
- Resource access requests are being discovered.
- NODISCOVER
- Resource access requests are not being discovered.
- PCT(cvda)
- Returns a CVDA value indicating whether resources protected by the XPCT system initialization parameter are being discovered. CVDA values are as follows:
- DISCOVER
- Resource access requests are being discovered.
- NODISCOVER
- Resource access requests are not being discovered.
- PPT(cvda)
- Returns a CVDA value indicating whether resources protected by the XPPT system initialization parameter are being discovered. CVDA values are as follows:
- DISCOVER
- Resource access requests are being discovered.
- NODISCOVER
- Resource access requests are not being discovered.
- PSB(cvda)
- Returns a CVDA value indicating whether resources protected by the XPSB system initialization parameter are being discovered. CVDA values are as follows:
- DISCOVER
- Resource access requests are being discovered.
- NODISCOVER
- Resource access requests are not being discovered.
- RES(cvda)
- Returns a CVDA value indicating whether resources protected by the XRES system initialization parameter are being discovered. CVDA values are as follows:
- DISCOVER
- Resource access requests are being discovered.
- NODISCOVER
- Resource access requests are not being discovered.
- TRAN(cvda)
- Returns a CVDA value indicating whether resources protected by the XTRAN system initialization parameter are being discovered. CVDA values are as follows:
- DISCOVER
- Resource access requests are being discovered.
- NODISCOVER
- Resource access requests are not being discovered.
- TST(cvda)
- Returns a CVDA value indicating whether resources protected by the XTST system initialization parameter are being discovered. CVDA values are as follows:
- DISCOVER
- Resource access requests are being discovered.
- NODISCOVER
- Resource access requests are not being discovered.
- USER(cvda)
- Returns a CVDA value indicating whether resources protected by the XUSER system initialization parameter are being discovered. CVDA values are as follows:
- DISCOVER
- Resource access requests are being discovered.
- NODISCOVER
- Resource access requests are not being discovered.
Conditions
- NOTAUTH
- RESP2 value:
- 100
- The user associated with the issuing task is not authorized to use this command.