Safeguard Audit Service Manual (G06.24+, H06.03+)

SAFEART Field Descriptions
Safeguard Audit Service Manual—520480-014
7-48
Enumerated Fields
Enable Refers to a TMF ENABLE operation.
Exclude Refers to a TMF EXCLUDE operation.
Execute Refers to opens of program files for execution.
Give Reserved for future use.
Grant Refers to an SQL grant or transmission of access rights to an SQL
object by one user to another.
Initialize Refers to a TMF INITIALIZE operation.
Insert Refers to an operation, not exclusively by SQL, involving the insertion of
a record or other collection of values into an object, such as a file or
table.
Kill Refers to OSS operation to terminate an existing process or group of
processes.
License Reserved for future use.
Link Refers to OSS operation to terminate an additional directory entry for an
existing file on the same fileset.
Logoff Refers to a logoff that occurs if a user successfully logs on at a terminal
where another user has not logged off. The previous user is
automatically logged off. Logoff also refers to logoffs that occur from
Safeguard terminals.
Logon Refers to a user authentication that is followed by either the creation of
a new process that executes as the authenticated user or the
transformation of an existing process that executes as the authenticated
user.
NewProcess Reserved for future use.
Next Refers to a TMF NEXT operation.
NextFile Refers to an audit file rollover resulting from a NEXTFILE command.
NextTape Refers to a nexttape operation.
OnlineDump Refers to a TMF online dump operation.
Open Refers to the establishment of a connection between an object and a
subject when an object is opened. This value is not used for audited
Safeguard events. More specific descriptions, such as READ and
WRITE, are used for Safeguard events.
OssResolve Refers to a Resolve record generated by an OSS Name Server to audit
the mapping of the path name used to access a file and the internal
name.
Other Refers to an event other than one of those described here.
Progid Reserved for future use.
Purge Refers to the deletion of an object after which the object ceases to exist.
Read Refers to object opens for read access.
Table 7-5. Operation Enumeration (page 2 of 3)
Value Description