For each individual UTM user, you can define whether the SIGN, CHANGE-PW, START-PU, END-PU, DATA-ACCESS, ADM-CMD events initiated by this user and any security-related events of a participating database are to be logged. However, the events are not logged for the user if SAT logging is switched off for this event with OFF:
UTM generation: SATSEL OFF,EVENT=...
UTM SAT administration: KDCMSAT SATSEL=OFF,EVENT=...
You can specify the following for each user:
SUCC | The events initiated by the user are logged if the result is success. |
FAIL | The events initiated by the user are logged if the result is failure. |
BOTH | The events initiated by the user are logged regardless of the result. |
NONE | No user-driven logging. |
The preselection values for user-driven logging can be set in the UTM generation with the statement:
USER username,...,SATSEL=...
Using UTM SAT administration functions, the preselection values can be set with the command:
KDCMSAT SATSEL=...,USER=username
Any of the values BOTH, SUCC, FAIL or NONE can be specified for SATSEL. These settings are retained past the end of the application run, even for UTM-F.