Report entities and attributes for Data Sets

Table 1. Attributes for Client/Server Entity (Data Sets)
Attribute	Description
Timestamp	All attributes in this session are static, so this timestamp is created only once, when Guardium observes a request on the defined connection for the first time.
Service Name	LPAR.
Server Description	Not populated.
DB User Name	Not populated. Use the following attributes from the Full SQL entity instead: IMS/DATA SET User ID or VSAM RLM CICS User ID (for RLM only)
Server Type	DATA SET. IMS. If more than one type of database is writing events to the Guardium system, this field helps separate the events.
Server IP	IP Address of LPAR.
Server Host Name	Hostname of LPAR.
Client IP	IP address of S-TAP. Usually the same as the Server IP.
Network Protocol	Type of access. DATA SET DATA SET Record Level Monitoring (RLM)
DB Protocol	DATA SET
Source Program	Job type: STC – Started Task TSU-Time sharing user JOB-Batch job APPC – Advanced Program-to-Program communication) OMVS- Unix System Services

Table 2. Attributes for Session Entity (Data Sets)
Attribute	Description
Timestamp	Initially, a timestamp created for the first request on a connection. Later, it is updated when it is marked inactive following an extended period of time with no observed activity.
Session ID	Unique identifier generated by Guardium. Because IMS does not have the concept of ‘sessions’, this is not particularly meaningful in IMS reporting.
Access ID	Uniquely identifies the access period for this line of the report.

Table 3. Attributes for Access Period Entity (Data Sets). This entity provides no useful information for Data Sets monitoring.
Attribute	Description
Application User	Not used for Data Sets
Failed SQLs	Not used for Data Sets
Total Records Affected	Not used. You will see -1 in this field. If you are interested in seeing how many records are affected for VSAM data sets, see the Data Set Records Inserted, Updated, Deleted and Retrieved fields in the Full SQL entity.
Successful SQLs	Not used.

Table 4. Attributes for Full SQL Entity (Data Sets)
Attribute	Description
Full SQL	Contains almost all information about an event. Computed attributes for other report fields are created from this data, which includes: uid=; prog=; job=; step=; step#=; job#=; ugid=; rec_dlt=; rec_del=; rec_ins=; rec_upd=; rec_ret=; pre=; desc=; type=; dbd=; dsn=; smf_accs=; nvs_mmb=; vsm_ddn=; nvexctr=; evt_time=; In general, you don’t need to include this attribute in reports, since the data is available in a more consumable fashion using other attributes.
Timestamp	Timestamp of the event in the collector’s timezone.
Records Affected	Not used. Instead, use the attributes DATA SETS Records Retrieved, Updated, Deleted, Inserted.
Returned Data	Not used.
Full SQL ID	Unique, sequenced identifier for this event. Can be helpful for sorting events in sequence.
Ack Response Time	Microsecond value from Timestamp of the event on the mainframe. Example: 677032 It is not recommended to use this field for sorting as it does not include leading zeros. Use Full SQL ID instead.
Statement Type	Not used.
Blind Variables Values	Not used.
IMS/DATA SET Program Name	The name of the application program issuing the data set calls or other access.
IMS/DATA SET Step Name	JCL step name for the executing program.
IMS/DATA SET Step Number	JCL step number for the executing program.
IMS/DATA SET Previous DSN	Data Set name before the rename occurred.
IMS/DATA SET Name	The data set name.
IMS/DATA SET Context	Type of activity. Examples for Data Set level reporting: DATA SET OPEN, DATA SET CLOSE, Member Delete, Member update, Security facility READ violation, Security facility ALTER violation, etc. For record level monitoring: Record Insert, Record Read, Record Update, and Record Delete.
IMS SMF/DATA SET Expiration Days	How many days until the data set expires.
IMS SMF/DATA SET Expiration IPL Time	Not used.
IMS SMF/DATA SET Type	Possible values for Data set monitoring: VSAM, Non-VSAM. Possible values for record level monitoring: RRDS, KSDS, VRRDS
IMS/DATA SET Job Name	Job name
IMS/DATA SET Job Number	Job number
IMS/DATA SET User ID	ID of originating request, such as the TSO or RACF authid.
DATA SET Records	Total number of records. Only written on close events. VSAM only.
DATA SET Records Updated	Number of records updated in this event. Only written on close events. VSAM only.
DATA SET Records Deleted	Number of records deleted in this event. Only written on close events. VSAM only.
DATA SET Records Inserted	Number of record inserted in this event. Only written on close events.. VSAM only
DATA SET Records Retrieved	Number of records read in this event. Only written on close events. VSAM only.
DATA SET User Group ID	Security system group ID.
VSAM RLM CICS User ID	Available only if CICS_SUPPORT is enabled for the S-TAP and the CICS system is configured to send the relevant information to the S-TAP as specified in the Guardium S-TAP for Data Sets on z/OS User’s Guide.
VSAM RLM CICS Transaction ID	Available only if CICS_SUPPORT is enabled for the S-TAP and the CICS system is configured to send the relevant information to the S-TAP as specified in the Guardium S-TAP for Data Sets on z/OS User’s Guide.
VSAM RLM CICS Program ID	Available only if CICS_SUPPORT is enabled for the S-TAP and the CICS system is configured to send the relevant information to the S-TAP as specified in the Guardium S-TAP for Data Sets on z/OS User’s Guide.
VSAM RLM CICS Terminal ID	Available only if CICS_SUPPORT is enabled for the S-TAP and the CICS system is configured to send the relevant information to the S-TAP as specified in the Guardium S-TAP for Data Sets on z/OS User’s Guide.
VSAM RLM CICS File ID	Available only if CICS_SUPPORT is enabled for the S-TAP and the CICS system is configured to send the relevant information to the S-TAP as specified in the Guardium S-TAP for Data Sets on z/OS User’s Guide.
VSAM RLM CICS Region ID	Available only if CICS_SUPPORT is enabled for the S-TAP and the CICS system is configured to send the relevant information to the S-TAP as specified in the Guardium S-TAP for Data Sets on z/OS User’s Guide.
VSAM RLM CICS Function Code	Available only if CICS_SUPPORT is enabled for the S-TAP and the CICS system is configured to send the relevant information to the S-TAP as specified in the Guardium S-TAP for Data Sets on z/OS User’s Guide. See above. The possible function codes and their mappings are as follows: 1 – READ_INTO 2 – READ_SET 3 – READ_UPDATE_SET 4 - READ_UPDATE_INTO 5 – WRITE 6 – REWRITE 8 – REWRITE_DELETE 10 – DELETE 11 – UNLOCK 12 – START_BROWSE 13 – READ_NEXT_INTO 14 – READ_NEXT_SET 15 – READ_PREVIOUS_INTO 16 – READ_PREVIOUS_SET 17 – READ_NEXT_UPDATE_INTO 18 – READ_NEXT_UPDATE_SET 19 - READ_PREVIOUS_UPDATE_INTO 20 - READ_PREVIOUS_UPDATE_SET 21 – RESET_BROWSE 22 – END_BROWSE
VSAM SMF Access Type	Possible values: IN, OUT Written only on CLOSE events. Distinguishes whether an access was “open for read” (IN) or “open for update” (OUT).
IMS/DATA SET Event Time	Timestamp of the event as recorded on the host in UTC format. The collector timezone is in the Timestamp field.
DATA SET Non-VSAM Member	If a PDS or PDSE member is allocated and opened, Member name is reported on event close. For programs that can access/update multiple members, such as IEBCOPY, member names are not reported.
DATA SET DD Name	The data definition (DDNAME) in the JCL or dynamically allocated by the started task.
Data SET Non-VSAM EXCP Count	The execute channel program (EXCP) counts for non-VSAM data sets, which basically tells you the number of reads and writes against these non-VSAM data sets. This allows for more granular reporting of access to partitioned data sets.
DATA SET RLM DD Name	The data definition (DDNAME) in the JCL or dynamically allocated by the started task for RLM monitoring.
Timestamp(microsec)	Not used.
More information	Contains CICS Unit of Work ID. There is no reason to use this attribute in your report. Use the DB2 z/IMS/DATA SET attribute for a more consumable version of this information.
DB2 z/IMS/DATA SET Unit of Work	CICS unit of work ID, in hex. Only available for record-level monitoring. 0x0000000000000000 if this activity is not part of a CICS transaction and RLM is not activated for a file.
DATA SET Non-VSAM New Member	If a PDS or PDS/E member name is renamed, this is the new name.

Table 5. Attributes for SQL Entity (Data Sets). The SQL Entity provides no added value for Data Sets reporting. Use the attributes you need from the Full SQL Entity instead
Attribute	Description
SQL	Contains a subset of fields from the FULL SQL entity. There is no reason to use this attribute in reporting.
Truncated SQL	Not used for data sets.

Table 6. Attributes for Command Entity (Data Sets)
Attribute	Description
SQL Verb	The event type. See Data Set Context Field in Full SQL for examples. If this field is added to a report built with Main Entity of Full SQL, this is reported as a count.

Table 7. Attributes for Object Entity (Data Sets)
Attribute	Description
Object Name	Name of the data set.
Object Type	Format of the object such as KSDS, RRDS, VSAM, non-VSAM.
IMS Segment/DSN/PART/AREA	The data set name.

Table 8. Attributes for Field Entity (Data Sets)
Attribute	Description
Field	Not used.