audit.action

  • Timing:

    The audit user exit is invoked when the active audit log file is closed. (Auditing continues as RSE switched to a new audit log file.)

  • Invocation arguments (1):
    • <audit_log>: full path name of the audit log file that was closed
  • Sample:
    /usr/lpp/zexpl/samples/process_audit.rex

    This sample z/OS® UNIX REXX exec builds a batch job that will process the audit log that was closed.