IBM Mainframe Forum

by **jayarc** » Fri Sep 11, 2009 11:13 pm

Hi All,

I apologize for not introducing myself in a separate post, but I have a question that is killing me! I am new to mainframes as we can all assume, and I am trying to integrate some security event logging software.

The software reads a file containing the output of the TSSAUDIT program, here in an sample of a file:

Select all

1ETRUST CA-TOP SECRET VERSION 12.0 AUDIT UTILITY 24/07/09 08:43:23 PAGE 001
+ _____________

0 INCOMING PARAMETER ===> CHANGES DATE(-01)
1ETRUST CA-TOP SECRET VERSION 12.0 AUDIT UTILITY 24/07/09 08:43:23 PAGE 002
+ _____________
- ----- LISTING OF CHANGES TO SECURITY FILE -----
-CHANGER DATE TIME SYSID TYPE COMMAND/IMAGE
======== ======== ======== ===== ==== ==============================================================================================

0GODGOD1 23/07/09 00:02:13 HVNN PW TSS REP(1193011 ) PASSWORD(????????)
JESUS01 23/07/09 00:44:03 HVNN CMND TSS ADD(1170275)PASS(?,,E)
JESUS01 23/07/09 00:44:03 HVNN CMND TSS ADD(1170276)PASS(?,,E)
JESUS01 23/07/09 00:44:05 HVNN CMND TSS ADD(1170277)PASS(?,,E)
JESUS01 23/07/09 00:44:05 HVNN CMND TSS ADD(1170278)PASS(?,,E)

Everything is working fine reading this file with the whole days changes! But, I am just looking for a way to automatically create this file every 5 or 10 minutes with only the changes that happened in that time. Can somebody explain to me how I would accomplish this on z/OS? JCL?

I have attached the guide for the TSSAUDIT program from CA. Keep in mind I am a complete newb and will be working remotely at best with mainframe operators to get this to work.

Thanks,

-Jay

by **dick scherrer** » Sat Sep 12, 2009 1:06 am

Hello Jay and welcome to the forum,

First - do not post copyright material. We may neither post nor link to copyright material on our forum. The attached manual has been deleted.

Suggest you open an issue with CA support and they can tell you if this is possible and if it is, how to do it.

by **jayarc** » Sat Sep 12, 2009 1:21 am

Sir,

If I wanted to contact CA for support, I would have done it. My intention was to get a concise and timely answer from an expert in the field, providing publicly available documentation as a reference. But, it looks like I'm in the wrong place for help. Your post and subsequently your forum has provided absolutely nothing of value to me.

This is the worst topic forum I've ever come across. It simply confirmed the stereotype that mainframe guru's are stodgy old ogres that are scared their dying art is at risk of being leaned by someone with substantially more mental acuity. You are part of the reason why Windows has become the predominant OS in the enterprise, even though it was the worst OS for 20 years. Why waste time trying to learn mainframes from people who don't care to teach, when you can install Windows Servers on your laptop at home.

Thanks for taking time to reply. Please, go ahead and delete this whole thread as well as my account, I will not be returning to your pleasant forum.

-Jay

by **dick scherrer** » Sat Sep 12, 2009 1:51 am

Hello,

Suggest you would have been better served if you had taken time to notice this forum is for students and beginners. You appear to be neither. . . unless you are simply a well-spoken ignoramus. Lots of people who have nothing to offer are able to say it well. . .

My intention was to get a concise and timely answer from an expert in the field, providing publicly available documentation as a reference

Was it available publically from CA? If not, it was stolen and should not have been posted.

I suggest it is not stodgy to be against theft. . . You might disagree. . . which would not be a surprise.

scared their dying art is at risk of being leaned by someone with substantially more mental acuity

If mental acuity was considered in sporting terms, you couldn't ride our bench. Indeed, if mental acuity were considered in sporting terms, you could not suit up for the junior varsity. If your mental acuity is your long suit, your career will be a very lonely place. Those who might not be as gifted as you will find you unbearable. Those of us who are most likely far more gifted will not tolerate your tantrums.

I will not be returning to your pleasant forum.

With your attitude, you won't be missed. Everyone makes the forum better. Some when they join and contribute. Others when they leave. . .

IBM Mainframe Forum

CA Top Secret - TSSAUDIT Output - z/OS

CA Top Secret - TSSAUDIT Output - z/OS

Re: CA Top Secret - TSSAUDIT Output - z/OS

Re: CA Top Secret - TSSAUDIT Output - z/OS

Re: CA Top Secret - TSSAUDIT Output - z/OS