Need to know if it is possible to find log of commands issued from CCS console that is launched from Consolidated window (MVCM MVCA)

Version 1
    Share This:

    This document contains official content from the BMC Software Knowledge Base. It is automatically updated when the knowledge article is modified.


    PRODUCT:

    MainView Console Management for zEnterprise - Base


    APPLIES TO:

    MVCM MVCA MainView Console Management for zEnterprise MainView Console Automation for zEnterprise



    QUESTION:

    How can you see which user entered a command on a particular mainframe console?


    ANSWER:

    When looking for an audit log for a command entered by a user, you need to:

    1. Turn on Command Auditing in Console Consolidation
    2. Determine which MVCM Console session into which the user entered the command

    Turn on Command Auditing:

    First, log into the MVCM configuration web page, and click on Console Consolidation. Edit the Console Consolidation server in which you wish to turn on editing.
     

      User-added image
      
    Next, select the Logging tab. Check Enable Command Auditing. 
       
      User-added image
      
    Note: changing this option will require stopping and restarting the Console Consolidation server. 

    Command Auditing must be turned on in every Console Consolidation Server where you want to track user command input. 

    Determine which Console Consolidation server's audit log contains the user command:

    To determine which Console Consolidation server's audit log you want to look in, you will need to know which Console Consolidation server the user connects to when entering commands. The MVCM Automation Viewer may be connected to many console servers and sessions simultaneously. Furthermore, a user may pop-out an individual console viewer when entering commands. All commands sent to the console, regardless of the viewer used, are stored in the Audit log.  

    To find which Consolidation server a particular session is running under, use the following methods: 

    MVCM Automation Viewer: 

    1. RIGHT-CLICK on the console session you are interested in. This will pop up the context menu. LEFT-CLICK on Show Message Details. 
       
      User-added image
      
     
    2. The Message Detail window will show the CONSOLE_HOST (the IP address of the MVCM server), the CONSOLE_PORT (the TCP/IP port the Consolidation Server is listening on for user commands), and SESSION_NAME (which is the name of the console in the Consolidation server).  
      
      
      User-added image 
      
      
      If the user entered the command from a pop-up stand alone CCS Viewer, look in the lower left corner of the viewer to determine the CONSOLE_PORT and SESSION_NAME.  
      
      
      User-added image 
      
      
      3. Once you have the CONSOLE_PORT and SESSION_NAME, you can user the Console Consolidation Session Report to find the correct Consolidation Server name. This will point you to the Audit Log you are interested in.  
     
    To use the Session Report, click on Console Consolidation in the MVCM web configuration page. Select the Session Report button.  
      
      
      User-added image
      
     
    In the Session Report, click on the CCS Client field to list the TCP/IP ports in numerical order. Search for the CONSOLE_PORT number, and you will find the Consolidation Server name. 
      
     
      User-added image 
      
      
      NOTE: Console Consolidation audit logs are named    CCSServerNameAUDIT.log. 

     


    Article Number:

    000182423


    Article Type:

    FAQ/Procedural



      Looking for additional information?    Search BMC Support  or  Browse Knowledge Articles