Mainframe Cybersecurity & Compliance

  • 1.  SMF in-memory resources

    Posted Aug 03, 2017 10:14 AM

    Hello

     

    IBM provided a new SMF functions months ago

     

    http://www-01.ibm.com/support/docview.wss?crawler=1&uid=isg1OA49263

     

    About SMF in-memory resources:

     

    An SMF in-memory resource is a wrap-around buffer that
    keeps selected records in memory and provides real-time access
    to those records. You can specify the size when you define an
    in-memory resource.

     

    SMF must be running in logstream recording mode in order to
    define and use in-memory resources and, thus, the real-time
    interface. Records can be recorded to an in-memory resource
    and may or may not also be written to a logstream depending on
    the configuration.

     


    ==========

     

    I think such instorage-logging would also solve TSS Audit Offload Problems

    Put TSS Audit Data into an SMF logstream and additionally into such a memory buffer.
    Using the new SMF-Api in an STC to read the inmemory data with wait-option in a loop allows to put  the data with minimal delay into db2 or equivalent (?)

     

    Is anybody using this for TSS or other SMF Data?


    #TopSecret