MF_JCL_AUDIT

Specifies that audit information is written to the audit log when a catalog entry is deleted.

Syntax:

MF_JCL_AUDIT=DLET|DLEJ|DLET,DLEJ

Parameters:

DLET	Logs audit information each time an ESMAC/CAS utility deletes a catalog entry
DLEJ	Logs audit information each time a step in a JCL job deletes a catalog entry
DLET,DLEJ	Logs audit information each time either an ESMAC/CAS utility or a JCL job step deletes a catalog entry

Properties:

Default:

None

Comments:

The information recorded in the log is:

The user who deleted the catalog entry
The group to which the user belongs
Whether the catalog entry was deleted by an ESMAC user or a JCL job step
The name of the deleted catalog entry
Whether the standard delete operation or the JCL delete operation was performed

Example:

The following is an example of the audit event passed to SYSLOG:

mf.jcl 35500 5:5 [timeQuality tzKnown="1" isSynced="0"][origin ip="127.0.0.1" enterpriseID="********.5043" 
software="Micro Focus Auditing" swVersion="API ver 1.2.2 syslog ver 1.0.0"][meta 
sequenceId="88"][MFAuditPropertyList@5043 SYSTEM="AUDIT   "] userid=SYSAD    groupid=SYSADM 
  jobnum=0000000 jobname=ESMAC    dsname=MFI01.ANF.TEST1                         
     member=         api=MVSCATIO apifunc=DLET