Dispatch

 View Only
Expand all | Collapse all

Anyone else using SMF Audit records with CA/Dispatch ?

  • 1.  Anyone else using SMF Audit records with CA/Dispatch ?

    Posted Nov 24, 2015 08:28 PM

    Anyone else using SMF Audit records with CA/Dispatch ?

     

    I turned it on for 2 days and the data analysis left me wondering what kind of users i had in the field.

     

    I have data records showing a user (in fact many users) getting 5000+ screens in a very short period of time. I suspected the users were running a script, but they told me it was not the case. Do you have user(s) with such high ratio of screens. Here's real data (1 smf record) :

        

    Screens (SMANUMSC)time in the report (SMATIMRP - SMATIMOP )average time per screen
    587900:33:2500:00:00,34

     

    Or is it the SMANUMSC field adding other stuff ?



  • 2.  Re: Anyone else using SMF Audit records with CA/Dispatch ?

    Broadcom Employee
    Posted Nov 25, 2015 12:26 PM

    Hello Rejean,

    I have opened a case for you on the values in the SMANUMSC field in the SMF record.. Case number 255298.

    Could you please send me a dump of the raw SMF records. I looked at some of the Audit SMF records here and they had values like 3 and 16. Nothing like what you are seeing.

    I need to see the raw SMF data  so I can compare and try to find an explanation.

    Thanks,

    john