PI65072: NEW FUNCTION TO PROVIDE IMPROVED SUPPORT FOR LOG ANALYTICS

Obtain the fix for this APAR.

APAR status

• Closed as new function.

Error description

• 1. For customers wishing to use Splunk for log analytics, this
  APAR produces JSON that is optimized for Splunk with the
     option to transform and load log records (as JSON Lines)
     directly into Splunk via TCP.
  
  2. For customers wishing to load logs into IBM DB2 Analytics
     Accelerator for z/OS (IDAA) or DB2, this APAR simplifies
     the process of generating the load JCL.
  
  3. For customers wishing to use any other target analytic
     platform, this APAR provides many enhancements to the
     log forwarding process to make it easier to use your
     chosen platform without intermediate steps.
  
  4. For customers using z/OS Connect Enterprise Edition (EE) this
     APAR includes support for the latest SMF record layouts.
  
  Summary of changes:
  
  1. ISPF dialog for generating JCL to load data into target
     platform enhanced with support for Splunk and and DB2/IDAA.
  
  2. New batch commands support streaming and flat JSON Lines
     structures optimized for Splunk.
  
  3. Various other enhancements make selecting and formatting
     fields for the appropriate analytics platforms simpler and
     more flexible.
  

Local fix

• None. New Function
  

Problem summary

• ****************************************************************
  * USERS AFFECTED: Transaction Analysis Workbench               *
  *                 Version 1 Release 3 users                    *
  ****************************************************************
  * PROBLEM DESCRIPTION: New function to provide improved        *
  *                      support for log analytics.              *
  ****************************************************************
  * RECOMMENDATION:                                              *
  ****************************************************************
  1. For customers wishing to use Splunk for log analytics, this
     APAR produces JSON that is optimized for Splunk with the
     option to transform and load log records (as JSON Lines)
     directly into Splunk via TCP.
  
  2. For customers wishing to load logs into IBM DB2 Analytics
     Accelerator for z/OS (IDAA) or DB2, this APAR simplifies
     the process of generating the load JCL.
  
  3. For customers wishing to use any other target analytic
     platform, this APAR provides many enhancements to the
     log forwarding process to make it easier to use your
     chosen platform without intermediate steps.
  
  4. For customers using z/OS Connect Enterprise Edition (EE)
     this APAR includes support for the latest SMF record layouts.
  

Problem conclusion

Temporary fix

Comments

• 1. ISPF dialog for generating JCL to load data into target
     platform enhanced with support for Splunk and and DB2/IDAA.
  
  2. New batch commands support streaming and flat JSON Lines
     structures optimized for Splunk.
  
  3. Various other enhancements make selecting and formatting
     fields for the appropriate analytics platforms simpler and
     more flexible.
  

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

  UI41500

Modules/Macros

• FUW#ABOU FUW#BDCZ FUW#BDDS FUW#BDD2 FUW#BDD3 FUW#BDEL FUW#BDFH
  FUW#BDFL FUW#BDHD FUW#BDIN FUW#BDMN FUW#BDOH FUW#BDOL FUW#BDOT
  FUW#BDSP FUW#PRIM FUW#PRNF FUW#WI13 FUW@PRIM FUWBATCH FUWBDDB2
  FUWBDDRV FUWBDDSN FUWBDELK FUWBDHAD FUWBDJCL FUWBDMNU FUWBDMN2
  FUWBDSPL FUWBRAPI FUWBRFMT FUWBRXCM FUWBSDSR FUWB01   FUWCSMVS
  FUWCSV   FUWCSVST FUWFLDRV FUWFMDRV FUWIMSPA FUWIPSTR FUWI00
  FUWLCAT  FUWPMT   FUWPRDRV FUWPRIM  FUWPROC  FUWRLDRV FUWRPS
  FUWRPSE  FUWRXDSP FUWSDDRV FUWSEXDS FUWSRCAP FUWULDRV FUWW07
  FUW4601Z FUW6E13Z FUW780BZ FUW7809Z HAHO130J
  

Fix information

• Fixed component name

  IBM TRANS ANALY

• Fixed component ID

  5697P3700

Applicable component levels

• R130 PSY UI41500

     UP16/10/12 P F610  

Fix is available

• Select the PTF appropriate for your component level. You will be required to sign in. Distribution on physical media is not available in all countries.