Define z/OS SMF Record Exits - 2.1

Ironstream for Splunk®/Kafka®/Elastic® for IBM Z® Installation

Product type
Software
Portfolio
Integrate
Product family
Ironstream
Product
Ironstream > Ironstream for Splunk®
Ironstream > Ironstream for Elastic®
Ironstream > Ironstream for Kafka®
Version
2.1
Language
English
Product name
Ironstream for Splunk®/Kafka®/Elastic® for IBM Z®
Title
Ironstream for Splunk®/Kafka®/Elastic® for IBM Z® Installation
First publish date
2014
Last updated
2024-12-19
Published on
2024-12-19T18:25:24.944000

Ironstream uses the standard z/OS SMF record exits IEFU83, IEFU84, IEFU85 and IEFU86 for real-time capture. IEFU83, IEFU84, and IEFU85 capture standard SMF record types, while IEFU86 captures extended record types. Standard records have a single byte that holds the record type, which ranges from 0 to 255. Extended records have an SMF record type of 126 with an extended header that allows for the definition of up to 2048 record types.

Ironstream is only able to intercept and capture SMF records if these exits are defined in all SYS and SUBSYS EXIT parameter lists in the SMFPRMnn member of SYS1.PARMLIB or one of its related data sets.