FLOOD and FLOODPOL — Specifying SMF record flood options

You can use the FLOOD and FLOODPOL parameters to specify SMF record flood options. Issue the SETSMF FLOOD(ON|OFF) command or update an SMFPRMxx with FLOOD(ON|OFF) to enable or disable the SMF record flood automation facility. No policy changes are performed as a result of this command. Turning the facility on and off will reset all counts and any active flood situations.

Use the FLOODPOL parameter in SMFPRMxx to specify a filter for the SMF record in flooding. Several options are required to define a flood policy. In the definition you must specify the following options:
  • The type of the records that the filter is for
  • The number of records in an interval for a given filter
  • The minimum amount of time that it can take to match the number of records in an interval
  • The number of intervals that can occur at a flooding rate before an action is taken
  • The length of time an interval should take before returning to normal
  • The action to take, either DROP or MSG
When the MSG filter is specified, message IFA780A is issued at the start of the flood to warn the user. Message IFA781I is issued when the flooding has stopped. When the DROP filter is specified, message IFA782A is issued at the start of the flood and dropping of records begins. Any attempts to write a record through SMFEWTM or SMFWTM macro will get a return code xx = 52. At the end of the flooding, message IFA783I is issued with the number of records dropped.