Product-specific activation and deactivation of logging and alarms
MODIFY-SAT-SUPPORT-PARAMETERS | Activate or deactivate SAT logging and SAT alarms for a given product |
SHOW-SAT-SUPPORT-PARAMETERS | Display the product for which SAT logging and the triggering of SAT alarms is activated |
SAT preselection
MODIFY-SAT-PRESELECTION | Change the selection of events (EVENT-AUDITING) and user IDs (USER-AUDITING), change the logical operation rule (PRESELECTION-RULE), change the authorization to invoke system exit 110 (EXIT) and define the logging quantity |
SAVE-SAT-PARAMETERS | Save the specified SAT parameters for the next system start in a SAT parameter file |
SHOW-SAT-STATUS | Display the selected user IDs, events and the set logical operation rules |
SAT filter mechanism
ADD-SAT-FILTER-CONDITIONS | Definition of conditions for preselection for SAT logging |
MODIFY-SAT-FILTER-CONDITIONS | Modify filter conditions |
REMOVE-SAT-FILTER-CONDITIONS | Delete filter conditions |
SAVE-SAT-PARAMETERS | Save the specified SAT parameters for the next system start |
SHOW-SAT-FILTER-CONDITIONS | Display the filter conditions. |
Controlling SAT logging
HOLD-SAT-LOGGING | Suspend auditing and close the SATLOG file |
RESUME-SAT-LOGGING | Resume auditing in a new SATLOG file |
SHOW-SAT-STATUS | Display the status of SAT logging (... INFORMATION=*LOGGING-STATUS) |
SATLOG file
CHANGE-SAT-FILE | Close the current SATLOG file and open a new SATLOG file. No data is lost during the changeover. |
SAVE-SAT-PARAMETERS | Save the specified SAT parameters for the next system start in a SAT parameter file |
SHOW-SAT-STATUS | Display the name of the SATLOG file, the attributes of the file and the current logging status (... INFORMATION=*COLLECTION-FILE) |
SAT alarm function
ADD-SAT-ALARM-CONDITIONS | Definition of conditions which trigger a console message to inform the security administrator immediately of any security violations |
MODIFY-SAT-ALARM-CONDITIONS | Modify alarm conditions |
REMOVE-SAT-ALARM-CONDITIONS | Delete alarm conditions |
SAVE-SAT-PARAMETERS | Save the specified SAT parameters for the next system start |
SHOW-SAT-ALARM-CONDITIONS | Display the alarm conditions. |
Notes
The above commands are available in SATCP with various functional scopes, depending on the logging status:
Command | SATCP status (as shown by SHOW-SAT-STATUS) | ||
HOLD | RECORD | NO-RESOURCE | |
HOLD-SAT-LOGGING | - | X | X |
RESUME-SAT-LOGGING | X | - | - |
MODIFY-SAT-PRESELECTION | - | X | - |
SHOW-SAT-STATUS | X | X | X |
MODIFY-SAT-SUPPORT-PARAMETERS | - | X | - |
SHOW-SAT-SUPPORT-PARAMETERS | X | X | X |
CHANGE-SAT-FILE | - | X | - |
SAVE-SAT-PARAMETERS | - | X | - |
ADD-SAT-ALARM-CONDITIONS | - | X | - |
MODIFY-SAT-ALARM-CONDITIONS | - | X | - |
REMOVE-SAT-ALARM-CONDITIONS | - | X | - |
SHOW-SAT-ALARM-CONDITIONS | X | X | X |
ADD-SAT-FILTER-CONDITIONS | - | X | - |
MODIFY-SAT-FILTER-CONDITIONS | - | X | - |
REMOVE-SAT-FILTER-CONDITIONS | - | X | - |
SHOW-SAT-FILTER-CONDITIONS | X | X | X |
All SAT commands are serialized, i.e. a SAT command will be rejected if any other command is currently executing (exception: the commands /SHOW-SAT-STATUS, /SHOW-SAT-ALARM-CONDITIONS, /SHOW-SAT-FILTER-CONDITIONS and /SHOW-SAT-SUPPORT-PARAMETERS, in all cases with the operand VALUE=*STD/*CURRENT).
If an error occurs during execution of a SAT command, the spin-off mechanism is triggered.