This document contains official content from the BMC Software Knowledge Base. It is automatically updated when the knowledge article is modified.
MainView Console Management for zEnterprise - Base
MVCM MVCA MainView Console Management for zEnterprise MainView Console Automation for zEnterprise
How can you see which user entered a command on a particular mainframe console?
When looking for an audit log for a command entered by a user, you need to:
1. Turn on Command Auditing in Console Consolidation
2. Determine which MVCM Console session into which the user entered the command
Turn on Command Auditing:
First, log into the MVCM configuration web page, and click on Console Consolidation. Edit the Console Consolidation server in which you wish to turn on editing.
Next, select the Logging tab. Check Enable Command Auditing.
Note: changing this option will require stopping and restarting the Console Consolidation server.
Command Auditing must be turned on in every Console Consolidation Server where you want to track user command input.
Determine which Console Consolidation server's audit log contains the user command:
To determine which Console Consolidation server's audit log you want to look in, you will need to know which Console Consolidation server the user connects to when entering commands. The MVCM Automation Viewer may be connected to many console servers and sessions simultaneously. Furthermore, a user may pop-out an individual console viewer when entering commands. All commands sent to the console, regardless of the viewer used, are stored in the Audit log.
To find which Consolidation server a particular session is running under, use the following methods:
MVCM Automation Viewer:
1. RIGHT-CLICK on the console session you are interested in. This will pop up the context menu. LEFT-CLICK on Show Message Details.
2. The Message Detail window will show the CONSOLE_HOST (the IP address of the MVCM server), the CONSOLE_PORT (the TCP/IP port the Consolidation Server is listening on for user commands), and SESSION_NAME (which is the name of the console in the Consolidation server).
To use the Session Report, click on Console Consolidation in the MVCM web configuration page. Select the Session Report button.
In the Session Report, click on the CCS Client field to list the TCP/IP ports in numerical order. Search for the CONSOLE_PORT number, and you will find the Consolidation Server name.