Record type 38 (X'26') — NetView Health Check and User Authorization Monitor

The NetView command authorization table external log record (SMF type 38 subtype 1) is generated when auditing the NetView command authorization table. It includes information such as the name of the command authorization table, the time when it was loaded, the name of the NetView domain, the command in question, the user ID whose authority is being checked, etc. Auditing is controlled globally by the CATAUDIT keyword of the NetView DEFAULTS command or specifically by using the AUDIT keyword on the PROTECT and EXEMPT statements in the NetView command authorization table. For more information about the PROTECT and EXEMPT statements, see IBM® Tivoli® NetView Security Reference.

The NetView task resource-utilization-data external log record (SMF type 38 subtype 2) logs data on utilization of system resources by specific NetView tasks. These records contain CPU, storage, message queuing, and DASD I/O utilization statistics. Records are made for logoff, task abend, and NetView ending events, and for interval requests when the LOGTSTAT command is used. Logging is determined by the LOGTSTAT command and the LOGTSTAT option of the DEFAULTS command and the OVERRIDE command. NetView initially starts with a value of YES.

The NetView span authorization table external log record (SMF type 38 subtype 3) is generated by auditing NetView span of control authorization checking. This record subtype provides information about successful and unsuccessful access attempts for both commands and NMC resources and views. The type of auditing that is performed is controlled by the LOGSPNCF, LOGSPNCP, LOGSPNVF and LOGSPNVP keywords of the DEFAULTS command and can be changed with the OVERRIDE command.