TSSUTIL and SMF records

Document ID : KB000126709
Last Modified Date : 12/02/2019
Show Technical Document Details
Introduction:
What SMF type records are read by TSSUTIL.
Question:
Will the TSSUTIL only report against SMF type 80 records? Does TSSUTIL process any other SMF records than the 80s?
Answer:
CA Top Secret creates SMF 80 and SMF 231 records. 

SMF 80 contain z/OS security events.

If OPTIONS(32) is turned on, USS events are written also written to the Audit Tracking File and the SMF 80 records. 

SMF 231 records contains USS events and SAF Trace Report
 
TSSUTIL doesnt read the SMF 231 records. 

TSSOERPT would be used to report on the SMF 231 records.