Command Logging

SA z/OS allows you to log the commands and their parameters that are issued by an operator. You can then use this log for audit purposes.

Several operator commands write an AOF705I message for each command execution. The AOF705I message lists all the parameters that have been specified together with the user ID of the operator or autotask that issued the command, for example:

AOF705I USER1 issued command INGREQ with MYAPL/APL/SAT1 REQ=START SCOPE=ONLY
        VERIFY=YES SOURCE=OPERATOR PRI=LOW PRECHECK=YES

AOF705I USER1 issued command INGIMS with IMS3CTL/APL/KEYC REQ=CMD CMD=/DIS

You can enable and disable command logging using the INGCNTL command, which sets the AOF_AAO_LOG_COMMAND advanced automation option (AAO), for example:

INGCNTL SET COMMAND_LOGGING=YES