Selecting a destination for zERT discovery SMF records

If you enable zERT discovery, then you can decide where you want the collected data to be recorded as SMF 119 subtype 11 records. By default, the SMF records are not written anywhere, so you must choose one of the following destinations in order to get the SMF records.

  • If you want the zERT connection detail (SMF 119 subtype 11) records to be written to the z/OS® System Management Facility Start of changefor connection initiation, termination and when security characteristics for the connection change (event types 1-4)End of change, specify the SMFCONFIG Start of changeTYPE119End of change ZERTDETAIL parameter in the TCP/IP profile data set. Note that you must also have the recording of SMF 119 records specified in your SMF parmlib member.
  • Start of changeIf you want the policy-driven zERT connection detail records (SMF 119 subtype 11, event type 7) to be written to the z/OS® System Management Facility, specify the SMFCONFIG TYPE119 ZERTDETAILBYPOLICY parameter in the TCP/IP profile data set.
    Note: You must also have the recording of SMF 119 records specified in your SMF parmlib member.
    End of change
  • If you use a network management application that consumes zERT connection detail SMF records Start of changefor connection initiation, termination, and when security characteristics for the connection change (event types 1-4)End of change through the real-time zERT Detail NMI service Start of change(SYSTCPER)End of change, specify the NETMONITOR ZERTSERVICE parameter in the TCP/IP profile data set. When this service is active, network management applications with the necessary SAF permission can connect to the service to receive zERT connection detail SMF records in near real-time.
  • Start of changeIf you use a network management application that consumes policy-driven zERT connection detail SMF records through the real-time zERT Detail NMI service (SYSTCPER), specify the NETMONITOR ZERTSERVICEBYPOLICY parameter in the TCP/IP profile data set. When this service is active, network management applications with the necessary SAF permission can connect to the service to receive zERT connection detail SMF records in near real-time.
    Note: If GLOBALCONFIG ZERT is not configured, then no zERT information will be collected, so even if you configure a recording destination, no SMF 119 subtype 11 records are generated.
    End of change

For more information on configuring SMFCONFIG or NETMONITOR, see SMFCONFIG statement and NETMONITOR statement in z/OS Communications Server: IP Configuration Reference.