Safeguard Audit Service Manual (G06.29+, H06.08+, J06.03+)

Audit File Record Formats
Safeguard Audit Service Manual — 520480-031
A - 4
Audit File Header Record
Field Definitions
ZRECORD-TYPE
is the audit record type. For header records, it is always the value of ZSFG-VAL-
AUD-REC-HEADER.
ZRECORD-LEN
is the length, in bytes, of this audit record.
ZAUDIT-RECORD-VERSION
is the revision level that is incremented only when the fields in existing records
(either primary or secondary) are modified to change their location or redefine the
content of the field, or a change occurs to the audit header record itself.
For example, in one of the enhancements in H06.21 RVU, a new field
SubjectProgramName was added in the primary record to denote the program file
name of the subject process. To adjust this new field, the value of ZSFG-VAL-LEN-
OBJECTNAME was changed from 3670 to 3646 so that the total length of the
primary record remained unchanged. Because of these changes in the audit record
format, ZAUDIT-RECORD-VERSION was also changed from 6 to 7.
ZCHECK-PAT-DISKFILE
specify whether the diskfile-pattern protection record is consulted to determine
access to disk files. Field type is enumerated.
ZCREATION-TIME
is a 64-bit Greenwich mean time (GMT) timestamp that indicates the date and time
when the audit file was initialized by the audit service.
ZCREATION-PROGRAM
is the file name of the program that created this
file.
ZTOS-VERSION
is the operating system product version number returned by the T
OSVERSION
procedure.
ZSFG-VERSION
is the Safeguard product version number.
ZAUDITING-SYSTEMNUMBER
is the system number of the system cont
aining the audit file.