Using SMF

The 3270 IDS incidents are written to the System Management Facility (SMF) as a series of type 119 (subtype 81) records. Each record contains a common section that describes the incident and a saved DSCOUNT outbound buffer. The last outbound SMF record for an incident contains the inbound buffer.

For more information about the record, see VTAM® 3270 Intrusion Detection Services event record (subtype 81) in z/OS Communications Server: IP Programmer's Guide and Reference.