thanks Jeff!
I did the TSS LIST(JOHNDOE) and “attributes” shows ‘console’. Does this mean audit for JOHNDOE userid not turned on?
When I do a TSS LIST(AUDIT) it displays JOHNDOE: USRCLASS = JOHNDOE. Doesn’t this mean audit is turned on for JOHNDOE?
TSS LIST(AUDIT) also displays the dataset I want to audit: DATASET = 'ABCD.EFGH' Can I assume audit is turned on for ABCD.EFGH access?
TSS MODI FAC(facility):
I had to research this command as I was afraid MODI meant modify, but I guess used in this context it only displays, which is a little confusing.
I tried it in our sandbox several parms to no avail:
TSS MODI FAC(USRCLASS)
TSS9186E The Facility name is invalid no such facility name.
TSS MODI FAC(DSNAME)
TSS9186E The Facility name is invalid no such facility name.
I was successful with TSO and STC parameter, which shows “ATTRIBUTES=NOPROMPT,NOAUDIT” probably means by default they are not being audited?
Bobby Sagami
HNA Mainframe Platform security