FEJJCNFG, the JES Job Monitor configuration file

JES Job Monitor (JMON) provides all JES-related services. The behavior of JES Job Monitor can be controlled with the definitions in FEJJCNFG.

FEJJCNFG is located in FEK.#CUST.PARMLIB, unless you specified a different location when you customized and submitted the FEK.SFEKSAMP(FEKSETUP) job. For more details, see Customization setup.

Customize the sample JES Job Monitor configuration member FEJJCNFG, as shown in the following sample. Comment lines start with a number sign (#) when using a US code page. Data lines can have only a directive and its assigned value. Comments are not allowed on the same line.

Note: For your changes to take effect, the JMON started task must be restarted.

Figure 1. FEJJCNFG, JES Job Monitor configuration file

SERV_PORT=6715
TZ=EST5EDT
#APPLID=FEKAPPL
#AUTHMETHOD=SAF
#CODEPAGE=UTF-8
#CONCHAR=$
#CONSOLE_INTERVAL=100
#CONSOLE_NAME=JMON
#DISPLAY_ACTIVE=ON
#DISPLAY_SYSIN=OFF
#GEN_CONSOLE_NAME=OFF
#HOST_CODEPAGE=IBM-1047
#LIMIT_COMMANDS=NOLIMIT
#LIMIT_CONSOLE=LIMITED
#LIMIT_VIEW=USERID
#LISTEN_QUEUE_LENGTH=5
#LOOPBACK_ONLY=ON
#MAX_DATASETS=32
#MAX_THREADS=200
#PASS_PHRASE=OFF
#TIMEOUT=3600
#TIMEOUT_INTERVAL=1200
#TRACE_STORAGE=OFF
#SAF_CLASS=FACILITY
#SEARCHALL=OFF
#SUBMIT_TIMEOUT=30
#SUBMITMETHOD=TSO
#TSO_TEMPLATE=FEK.#CUST.CNTL(FEJTSO)

SERV_PORT

The port number for JES Job Monitor. The default port is 6715. The port can be changed if needed.

Note:

This value must match the port number set for JES Job Monitor in the rse.env configuration file. If these values differ, RSE cannot connect the client to JES Job Monitor. To learn how to define the variable for RSE, see rse.env, the RSE configuration file.
Before selecting a port, verify that the port is available on your system by using the NETSTAT and NETSTAT PORTL TSO commands.

TZ

Time zone selector. The default is EST5EDT. The default time zone is UTC -5 hours (Eastern Standard Time (EST) Eastern Daylight Savings Time (EDT)). Change this value to represent your time zone. Additional information can be found in the UNIX System Services Command Reference (SA22-7802).

The following definitions are optional. If omitted, default values are used as specified below:

APPLID

Specifies the application identifier used for identifying JES Job Monitor to your security software. The default is FEKAPPL. Uncomment and change to the required application ID.

Note: This value must match the application ID set for RSE in the rse.env configuration file. If these values differ, RSE cannot connect the client to JES Job Monitor. To learn how to define the variable for RSE, see rse.env, the RSE configuration file.

AUTHMETHOD

The default is SAF, which means that the System Authorization Facility (SAF) security interface is used. Do not change unless directed to do so by the IBM® support center.

CODEPAGE

The workstation code page. The default is UTF-8. The workstation code page is set to UTF-8 and generally should not be changed. If you have difficulty with multilingual characters, such as the currency symbol, you might need to uncomment the directive and change UTF-8 to match the workstation's code page.

CONCHAR

Specifies the JES console command character. CONCHAR defaults to CONCHAR=$ for JES2, or CONCHAR=* for JES3. Uncomment and change to the requested command character.

CONSOLE_INTERVAL

Specifies, in 1/100 of a second, how long JES Job Monitor will wait before collecting console messages after issuing one of the supported operator commands. The default value is 100 (1 second). The minimum value is 1. The maximum value is 2, 147, 483, or 647. Uncomment and change to the desired interval.

CONSOLE_NAME

Specifies the name of the EMCS console used for issuing commands against jobs (Hold, Release, Cancel, Purge, change CLASS, and change MSGCLASS). The default is JMON. Uncomment and change to the required console name, using the following guidelines.

CONSOLE_NAME must be either a console name consisting of 2 to 8 alphanumeric characters, or '&SYSUID' (without quotes).
If a console name is specified, a single console by that name is used for all users. If the console by that name is already in use, the command issued by the client will fail.
If &SYSUID is specified, the client user ID is used as the console name. Thus, a different console is used for each user. If the console by that name is already in use (for example, the user is using the SDSF ULOG), the command issued by the client might fail, depending on the GEN_CONSOLE_NAME setting.

No matter which console name is used, the user ID of the client that is requesting the command is used as the LU of the console, leaving a trace in syslog messages IEA630I and IEA631.

IEA630I OPERATOR console NOW ACTIVE,   SYSTEM=sysid, LU=id
IEA631I OPERATOR console NOW INACTIVE, SYSTEM=sysid, LU=id

DISPLAY_ACTIVE

Controls whether a client can show system information, for example, job name, owner, and CPU usage of all active address spaces. The default is ON. Uncomment and specify OFF to disallow showing all active address spaces.

DISPLAY_SYSIN

Enables or disables the display of SYSIN data. The default is OFF. To display SYSIN data, uncomment and change to ON.

GEN_CONSOLE_NAME

Enables or disables automatic generating of alternative console names. The default is OFF. To enable alternative console names, uncomment and change to ON.

This directive is used only when CONSOLE_NAME equals &SYSUID and the user ID is not available as console name.

If GEN_CONSOLE_NAME=ON, an alternative console name is generated by appending a single numeric digit to the user ID. The digits 0 through 9 are attempted. If no available console is found, the command issued by the client fails.

If GEN_CONSOLE_NAME=OFF, the command issued by the client fails.

Note: The only valid settings are ON and OFF.

HOST_CODEPAGE

The host system code page. The default is IBM-1047. Uncomment and change to match your host system code page.

Note that this code page is not used for data interpretation, only for server operations and client connection setup. The z/OS® Explorer client provides the code page to be used for data interpretation (which is retrieved from the properties of the "MVS Files" subsystem).

LIMIT_COMMANDS

Defines against which jobs the user can issue selected JES commands (Show JCL, Hold, Release, Cancel, Purge, change CLASS, and change MSGCLASS). The default (LIMIT_COMMANDS=USERID) limits the commands to the jobs owned by the user. To allow the user to issue commands against all spool files, if permitted by your security product, uncomment this directive and specify LIMITED or NOLIMIT.

Table 1. LIMIT_COMMANDS command permission matrix
	Job owner
LIMIT_COMMANDS	User	Other
USERID (default)	Allowed	Not allowed
LIMITED	Allowed	Allowed only if explicitly permitted by security profiles
NOLIMIT	Allowed	Allowed if permitted by security profiles or when the `JESSPOOL` class is not active

Note: The only valid settings are USERID, LIMITED, and NOLIMIT.

LIMIT_CONSOLE

Defines how much authority is granted to the console that is used to execute supported JES commands (Hold, Release, Cancel, Purge, change CLASS, and change MSGCLASS). The default (LIMIT_CONSOLE=LIMITED) limits the authority to commands protected by a security profile in the OPERCMDS class. To allow execution of supported JES commands that are not protected by a security profile, uncomment this directive and specify NOLIMIT.

When a security profile exists for a command, the user must have sufficient permission to execute the command, regardless of the LIMIT_CONSOLE setting. The only valid settings are LIMITED and NOLIMIT.

LIMIT_VIEW

Defines what output the user can view. The default (LIMIT_VIEW=NOLIMIT) allows the user to view all JES output, if permitted by your security product. To limit the view to output owned by the user, uncomment this directive and specify USERID.

Note: The only valid settings are USERID and NOLIMIT.

LISTEN_QUEUE_LENGTH

The TCP/IP listen queue length. The default is 5. Do not change unless directed to do so by the IBM support center.

LOOPBACK_ONLY

Defines whether JES Job Monitor binds to the loopback address only, or to every available TCP/IP stack. Binding to loopback is more secure, because only tasks local to this z/OS system will be able to contact JES Job Monitor. The default is ON. Uncomment this directive and specify OFF if you want JES Job Monitor to bind to all TCP/IP stacks.

MAX_DATASETS

The maximum number of spooled output data sets that JES Job Monitor will return to the client (for example, SYSOUT, SYSPRINT, SYS00001, and so on). The default is 32. The maximum value is 2147483647.

MAX_THREADS

Maximum number of connections that can interact with JES Job Monitor simultaneously. The default value is 200. The maximum value is 2147483647. Increasing this number might require you to increase the size of the JES Job Monitor address space.

PASS_PHRASE

Support authentication using a pass phrase. The default is OFF. Uncomment and specify ON to allow pass phrases up to 100 characters instead of an 8-character password or PassTicket for authentication.

Note: This option only applies to clients that connect directly to JMON. This does not include the z/OS Explorer client, which connects to the RSED daemon and in turn the daemon connects to JMON by using PassTickets for authentication.

TIMEOUT

The length of time, in seconds, before a thread is removed due to lack of interaction with the client. The default is 3600 (1 hour). The maximum value is 2147483647. TIMEOUT=0 disables the function.

TIMEOUT_INTERVAL

The number of seconds between timeout checks. The default is 1200(20 minutes). The maximum value is 2147483647. The JES Job Monitor checks for idle sessions every TIMEOUT_INTERVAL seconds. The idle sessions are not immediately removed when they reach the TIMEOUT marker. Once passed the TIMEOUT marker, they are eligible and removed during the next idle check.

TRACE_STORAGE

Enable storage tracing. The default is OFF. The only valid values are ON and OFF. Use only when directed by the IBM support center. To write a storage report to DD SYSOUT after each command, uncomment this directive and specify ON.

SAF_CLASS

The security class holding JES Job Monitor specific FEJ.** security profiles. The default is FACILITY. Uncomment and change to match your actual security class name.

SEARCHALL

Collect APPC and z/OS UNIX output that matches the JES Job Monitor filter. The default is OFF. The only valid values are ON and OFF. To collect the additional spool files, uncomment this directive and specify ON.

SUBMIT_TIMEOUT

The number of seconds that z/OS Explorer will wait for the completion of the TSO_TEMPLATE job. The default is 30. The maximum value is 2147483647. Note: SUBMIT_TIMEOUT has no effect unless SUBMITMETHOD=TSO is also specified.

SUBMITMETHOD=TSO

Submit jobs through TSO. The default (SUBMITMETHOD=JES) submits jobs directly into JES. To submit the job through TSO SUBMIT command, uncomment this directive and specify TSO. This method allows TSO exits to be called; however, this method has a performance drawback.

Note:

The only valid settings are TSO and JES.
If SUBMITMETHOD=TSO is specified, TSO_TEMPLATE must also be defined.

TSO_TEMPLATE

Wrapper JCL for submitting the job through TSO. The default value is FEK.#CUST.CNTL(FEJTSO). This statement refers to the fully qualified member name of the JCL to be used as a wrapper for the TSO SUBMIT command. For more information, see the SUBMITMETHOD statement.

Note:

A sample wrapper job is provided in FEK.#CUST.CNTL(FEJTSO). See this member for more information about the customization needed.
TSO_TEMPLATE has no effect unless SUBMITMETHOD=TSO is also specified.