Procedure for near real-time

Using the direct near real-time SMF interface requires either of these input sources:

CKQEXSMF

The CKQEXSMF task can be used to intercept the SMF records using SMF exits. When using this method, you must ensure that the SMF record exits are enabled in your SMFPRMxx parmlib member, and you must set up and start the CKQEXSMF started task. This method has no prerequisites on using SMF logstreams or INMEM resources.

SMF INMEM

When using SMF logstreams, you can add an in-memory resource name using SMF INMEM support. You define an additional in-memory destination of selected SMF records in your SMFPRMxx parmlib member. The default INMEM name that zSecure uses is IFASMF.CKQRADAR. Also specify the required SMF types in the TYPE() parameter; for example:

INMEM(IFASMF.CKQRADAR,RESSIZMAX(128M),
   TYPE(0,7,9,11,14,15,17,18,22,26,30,36,41,42,
          43,45,47:49,52:59,61,62,64:66,80:83,90,
          92,102,110,118,119,230))