|
View previous topic :: View next topic
|
| Author |
Message |
sfreire
New User
Joined: 03 Jul 2010
Posts: 2
Location: Brazil
|
|
|
|
Hi guys,
it is possible read records SMF - CEF with ICETOOL ?
The records has:
- SMF Header Format
- MVS Syslog header Format
- CEF header Format.
I can map SMF header but not map CEF header. Any idea ?
Has anyone worked with SMF - CEF records?
Thanks in advance, |
|
| Back to top |
|
 |
Joerg.Findeisen
Senior Member
Joined: 15 Aug 2015
Posts: 1329
Location: Bamberg, Germany
|
|
|
|
| Please, where to find the record description? What SMF Record number is it? |
|
| Back to top |
|
|
PeterHolland
Global Moderator
Joined: 27 Oct 2009
Posts: 2481
Location: Netherlands, Amstelveen
|
|
| Back to top |
|
|
sfreire
New User
Joined: 03 Jul 2010
Posts: 2
Location: Brazil
|
|
|
|
Hi Joerg,
is record #140, proprietary record.
SMF header is easily mapped,
But I don't know how to map the CEF Header. |
|
| Back to top |
|
|
Robert Sample
Global Moderator
Joined: 06 Jun 2008
Posts: 8700
Location: Dubuque, Iowa, USA
|
|
|
|
| Quote: |
| is record #140, proprietary record. |
IBM SMF record types are 0 to 127 and (IIRC) 256 to 1151. Record types 128 to 255 and 1152 to 2047 are used by software vendors. So 140 is, by definition, a proprietary record.
| Quote: |
| But I don't know how to map the CEF Header. |
Contact the vendor. Since I've never heard of CEF in the context of SMF records, the vendor is most likely your BEST source of information. |
|
| Back to top |
|
|
|
|
