Excluding DLI calls on specific LPARS from being audited

By default, the IBM Security Guardium S-TAP for IMS agent creates Common Memory Management address spaces (AUIUSTC) on all LPAR members of a SYSPLEX. This allocates E/CSA memory, and inserts DLI call filtering criteria across all LPARS. A single agent monitors IMS control regions and DLI/DBB batch jobs running on any LPAR of the SYSPLEX.

If you do not want to transmit the AUIUSTC address spaces to all LPARs, the AUIU_EXCLUDE_LPAR keyword can be used to exclude specific LPARS from the target list of eligible LPARS: AUIU_EXCLUDE_LPAR(lpar1, lpar2…lpar9)

The LPAR where the agent is running cannot be excluded. All other LPARS can be excluded by using the *ALL option in place of the LPAR name.