Trace SIEM Monitor command (PSATRCSIEM)

Specify the name of the monitor for which tracing will be started or stopped. Event Source monitor names are shown on the Work with Event Sources panel (for example, AB, AUDIT, and SYSMSG). Output Target names are user defined, and appear on the Work with Outputs panel.

In order to add tracing, stop the monitor, attach tracing, then restart the monitor. Stop the monitor before To end tracing, first stop the monitor.

NOTE: Tracing can create a large volume of data in a short time period and should not be left active for longer than necessary.

How to get there

On the Work with Utilities panel, choose option 2.

Options

Monitor (MONITOR)

Specify the name of the monitor for which tracing will be started or stopped. Event Source monitor names are shown on the Work with Event Sources panel (for example, AB, AUDIT, and SYSMSG). Output Target names are user defined, and appear on the Work with Outputs panel.

*MAIN
Controls tracing for the main SIEM Monitor Controller.
Name
Controls tracing for an Event Source or Output Target monitor you name.
Start or stop tracing (TRACE)

Indicate whether you would like to start or stop tracing the specified monitor.

Monitor type (TYPE)

Specify the type of monitor whose name you entered for the MONITOR parameter. The valid types are *SOURCE for an Event Source, or *OUTPUT for an Output Target.

Output path (PATH)

Specify the fully-qualified path to the stream file that will receive the trace output data. The stream file will be created when the monitor begins tracing its operation. The stream file will be created with CCSID 1208 (UTF-8).

Command Keys

F3=Exit

Exit the program.

F4=Prompt

Displays a list of items from which one or more may be selected.

F5=Refresh

Discards changes and remains on this panel.

F12=Cancel

Discards changes and returns to the prior panel.

F13=Information Assistant

Displays the Information Assistant menu with several types of assistance available. Press this key to access more information about the i5/OS system, such as, what's new for this release of the i5/OS system, how to comment on information, and where to look for i5/OS information in books and online.

F24=More keys

Shows more Command Keys.