SAT logging files (SATLOG)

Each SATLOG file consists of audit records which describe security-relevant events.

The SATLOG files are created on the user-specified pubset under the SYSAUDIT user ID, with a name structured as follows:

$SYSAUDIT.SYS.SATLOG.yyyy-mm-dd.sss.nn where:

yyyy-mm-dd	creation date
sss	session number
nn	number of the file in this session (01 through 99)

The FMTYFNLG system parameter does not affect SATLOG files. The SATLOG files are created as SAM files with the attribute DESTROY=YES in EXTEND mode, with a block size of (STD,2), space allocation (1002,1002) and audit attribute ALL.

These records are written by a separate task for performance reasons. SAT makes use of the CLTF (Common Log Task Facility) interface for this purpose.