IBM Support

OA68482: SAMPLE MEMBERS FOR DEFINING THE ZSECURE ADMIN COMMAND LOGGER LOGSTREAM DO NOT SPECIFY AUTODELETE(YES)

A fix is available

Subscribe

You can track all active APARs for this component.

 

APAR status

  • Closed as program error.

Error description

  • Sample members for defining the zSecure Admin Command Logger
    logstream do not specify AUTODELETE(YES).
    
    The zSecure documentation states:
    
    "The zSecure command logger records are written to a z/OS log
    stream. Data in a log stream is kept according to the specified
    retention period (RETPD keyword) when defining the log stream.
    If you need to retain records for a longer period, you can
    offload the records to a sequential dataset. The offloaded data
    can be used directly as input source for zSecure reporting. The
    offloading process can be done using IEBGENER or CKRCARLA"
    
    however old data will not be removed from the log stream as
    intended because AUTODELETE(YES) is not specified in the sample
    members CKXZLGCF and CKXZLGST.
    

Local fix

  • Specify AUTODELETE(YES) when using SCKRSAMP members CKXZLGCF or
    CKXZLGST, along with a suitable retention period (RETPD) for
    your requirements.
    

Problem summary

  • ****************************************************************
    * USERS AFFECTED: Users of zSecure Admin performing setup      *
    *                 tasks for the zSecure Admin Command Logger   *
    *                 function.                                    *
    ****************************************************************
    * PROBLEM DESCRIPTION: Sample jobs CKXZLGCF and CKXZLGST do    *
    *                      not properly define the model log       *
    *                      stream required to run the zSecure      *
    *                      Command Logger function.                *
    ****************************************************************
    * RECOMMENDATION: Apply the PTF provided and use the update to *
    *                 perform setup of zSecure Admin Command       *
    *                 Logger function.                             *
    ****************************************************************
    When CKXZLGCF and CKXZLGST sample jobs provided by zSecure
    Admin installation are used to define a model log stream,
    AUTODELETE attribute gets default value of AUTODELETE(NO) and
    log data is not deleted after the the specified retention
    period.
    

Problem conclusion

  • zSecure Admin sample jobs CKXZLGCF and CKXZLGST have been
    modified, so that they include the 'AUTODELETE(YES)' argument
    for the 'DEFINE LOGSTREAM' statement, so that the log data is
    automatically removed after specified retention period.
    

Temporary fix

Comments

APAR Information

  • APAR number

    OA68482

  • Reported component name

    ZSEC BASE,ADMIN

  • Reported component ID

    5655T0100

  • Reported release

    310

  • Status

    CLOSED PER

  • PE

    NoPE

  • HIPER

    NoHIPER

  • Special Attention

    NoSpecatt / Xsystem

  • Submitted date

    2025-09-09

  • Closed date

    2025-09-25

  • Last modified date

    2025-10-02

  • APAR is sysrouted FROM one or more of the following:

  • APAR is sysrouted TO one or more of the following:

    UJ98127

Modules/Macros

  • CKXZLGCF CKXZLGST
    

Fix information

  • Fixed component name

    ZSEC BASE,ADMIN

  • Fixed component ID

    5655T0100

Applicable component levels

  • R310 PSY UJ98127

       UP25/09/26 P F509

Fix is available

  • Select the PTF appropriate for your component level. You will be required to sign in. Distribution on physical media is not available in all countries.

[{"Business Unit":{"code":"BU048","label":"IBM Software"},"Product":{"code":"SSPQTM","label":"IBM Security zSecure Admin"},"Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"310","Line of Business":{"code":"LOB70","label":"Z TPS"}}]

Document Information

Modified date:
02 October 2025