SAT logging can be switched on and off individually for each of the events SIGN, CHANGE-PW, START-PU, END-PU, DATA-ACCESS and ADM-CMD. For the DATA-ACCESS event (access to UTM storage area), logging can be controlled individually for each of the storage types global secondary storage area, terminal-specific long-term storage area (TLS), and user-specific long-term storage area (ULS).
You can specify the following for each individual event:
OFF | The event is never logged, even when user-specific or job-specific logging is switched on. |
SUCC | The event is logged if the result is success. |
FAIL | The event is logged if the result is failure. |
BOTH | The event is logged regardless of the result. |
NONE | No event-driven logging. |
The preselection values for event-driven logging can be set in the UTM generation using the SATSEL statement. Using UTM SAT administration functions, you can set the preselection values with the command:
KDCMSAT SATSEL=...,EVENT=(...)
This setting is only valid for the duration of the application run.
Example
The “change password” event (CHANGE-PW) is to be logged if the result is success (the change was accepted by openUTM) or if the result is failure. In the latter case, the issuing of an administration command is to be logged.
UTM generation:
SATSEL BOTH,EVENT=CHANGE-PW
SATSEL FAIL,EVENT=ADM-CMD
Administration:
KDCMSAT SATSEL=BOTH,EVENT=CHANGE-PW
KDCMSAT SATSEL=FAIL,EVENT=ADM-CMD