Outline of operation logs

Operation logs are output in the following cases:

When a request is issued to HULFT
When a command of HULFT is executed
When HULFT accesses a system file

The operation logs output when the Send File is issued are shown below.

Figure 2.36 Operation Logs for Send File

1) When the Send File is executed on the HULFT Management Console or on the console, the date and time that the Send File was executed, the user ID, the host name, and other information are output to the Command Execution Log file of HULFT on the host on the sending side.

2) When the Send processing is carried out according to the Send File and a Send Log record is added, the date and time when the log record was added, the Identifier that identifies the added log record, and other information are output to the File Access Log file of HULFT on the host on the sending side.

3) When the Receive processing is carried out and a Receive Log record is added, the date and time when the log record was added, the Identifier that identifies the added log record, and other information are output to the File Access Log file on the host on the receiving side.

(1) File Access Log and Command Execution Log

The records of file access and the records of issuance of requests and execution of commands are output to separate log files (the File Access Log file and the Command Execution Log file, respectively).

Operation log records are recorded in VSAM files. Two files are created for the File Access Log, and two files are created for the Command Execution Log. Specify the output destination in the System Environment Settings (the File Access Log Output Data Set Name 1 (OPLFILE1) and the File Access Log Output Data Set Name 2 (OPLFILE2), and the Command Execution Log Output Data Set Name 1 (OPLCMD1) and the Command Execution Log Output Data Set Name 2 (OPLCMD2)).

Table 2.19 Types of Operation Log
Types of Operation Log	Output Destination	Description
File Access Log	Specify in the System Environment Settings	The log is output when information is added, updated, or deleted in system files, such as the system management information and various logs.
Command Execution Log	Specify in the System Environment Settings	The log is output when a request is issued or a command is executed.

For lists of system file types, file access types, and requests or commands for which operation logs are output, refer to Format and reference keys in operation logs.

= Remarks =

The File Access Log is output when the contents of a system file are modified. If you view a file without modifying it, the log is not output.
The Command Execution Log is output by the host on the side where the request was issued or the command was executed. The Observe Log as well as the File Access Log that carries the record of the addition in the Observe Log are output by the requestee side.
When a target range is specified to delete multiple records from the system management information or logs, only one entry is output to the Command Execution Log, while one entry per deleted record is output to the File Access Log.
The operation logs do not include internal operations of the system such as deletion of temporary files, because the purpose of the logs is to keep a record of user operation.
The operation logs are not output if incorrect settings are specified for the File Access Log Output Data Set Name 1 and the File Access Log Output Data Set Name 2 or the Command Execution Log Output Data Set Name 1 and the Command Execution Log Output Data Set Name 2 in the System Environment Settings, or if the output destination specified in the System Environment Settings file (HULFT.PARMLIB(HULPRM)) does not exist.

(2) Information Output to Operation Logs

Information output to the operation logs is divided into the following categories:

Information on the issued request or executed command that is the origin of the series of processing/transaction (starting point information)
Information on the processing that was carried out according to the issued request or executed command (processing information)
Information specific to the File Access Log
Information specific to the Command Execution Log

The following information is output to the operation log in CSV format:

Starting point information is the information at the time when the issuance of the request or execution of the command is started. The connection destination is notified of the information, and the same information is used by all the File Access Log records and the Command Execution Log records within one transaction.

= Remarks =

The connection destination is always notified of the starting point information other than the user ID when the operation log output function is used.

Execution Start Time and Date

Time and date when the issuance of the request or execution of the command is started

These fields indicate the time and date that are set on the operating system of the starting host.

User ID (OS) and User ID (Management Console)

User ID of the user who performed the operation

These fields indicate the operating system user ID on the starting host, and the user ID on the Management screen that issued the request, respectively.

The definitions vary depending on the type of starting host:

Table 2.20 Difference between Definition of User ID (OS) and User ID (Management Console) by Host Type
Host Type	User ID (OS)	User ID (Management Console)
HULFT for Mainframe	User ID on the operating system (*1)	User ID of the user who used the HULFT Management Console
HULFT for UNIX/Linux	User name on the operating system	Same as the User ID (OS) (Shown as "" when the Management Console Security is disabled)
HULFT for Windows	User name on the operating system	User name registered on the Management Console Security (Shown as "" when the Password Check is disabled)
HULFT for IBMi	User ID on the operating system	Same as the User ID (OS) (Shown as "" when the Management Console Security is disabled)
HULFT Manager	User name on the operating system	User ID (Management Console) on HULFT at connection destination
HULFT-HUB Server	User name on the operating system	Always shown as "", because there is no Management screen
HULFT-HUB Manager	User name on the operating system	User name of user that logged on to HULFT-HUB Server

The user ID is obtained from RACF (Resource Access Control Facility).

This information is not obtained when RACF is not running.

Note

When a user ID (OS) in the operation logs contains a multi-byte code, the user ID (OS) appears correctly only if all of the following conditions are met:

The host type of both the starting host and the destination host is Windows
The system locale is the same on the starting host and the destination host

If not all the conditions are met, the user ID (OS) appears incorrectly.

Starting Host Name

Name of the local host that performed the operation

For details about the local host name, refer to Handling of local host name.

Identifier

Identifier of transaction

For each transaction, a different Identifier is generated. There are two types of identifiers, the Latest Identifier and the Starting Identifier. For details about the Latest Identifier and the Starting Identifier, refer to Identifier.

Identifiers can link the operation log records with the records in the Send and Receive Log file (HULFT.LOG), because the identifiers are output to the log records, as well.

Processing information is the information at the point when a file is accessed or when the issuance of the request or execution of the command is processed.

Execution Time and Date

Time and date when file access, issuance of the request, or execution of the command was processed

These fields indicate the time and date that are set on the operating system of the execution host.

Execution Host Name

Local host name of the host on which file access, issuance of the request, or execution of the command was processed

For details about the local host name, refer to Handling of local host name.

Operation Log User-specified Character

Character string to identify HULFT that outputs the operation logs

This field indicates with a character string which HULFT outputs which operation log, when the operation log records output by two or more HULFT systems are accumulated.

Table 2.21 Strings Specified for Operation Log User-specified Character
Host Type	Strings Specified for Operation Log User-specified Character
HULFT for Mainframe	Operation Log User-specified Character in the System Environment Settings
HULFT for UNIX/Linux	HULFT Identifier in the System Environment Settings
HULFT for Windows	Operation Log User-specified Character in the System Environment Settings
HULFT for IBMi	HULFT Identifier in the System Environment Settings
HULFT Manager	User-specified Character in the System Environment Settings
HULFT-HUB Server	Service Name in the System Environment Settings
HULFT-HUB Manager	User-specified Character in the System Environment Settings

Information specific to the File Access Log is the information on the types and targets of file access. It is output only to the File Access Log.

For the list of the output values, refer to Format and reference keys in operation logs.

File Access Type

Type of file access

This field indicates the type of operation for a file or a record, such as addition, modification, or deletion.

System File Type

The system file that is the target of file access

This is an identifier that indicates the target system file of file access.

File Key Information

Fields in the file that is the target of file access

This field indicates additional information to identify the record that was accessed when two or more records are stored in one file, such as the system management information, or logs.

Information specific to the Command Execution Log is the information on the processed requests or commands. This is output only to the Command Execution Log.

For the list of the output values, refer to Format and reference keys in operation logs.

Command Execution Key

Type of request or command

This field shows the identifier that indicates the processed request or command.

Command Issued by

Issuer of requests or commands

This field shows the identifier that indicates the source of requests or commands, such as whether the command was executed in the command line, or whether the request was issued on the HULFT Management Console.

Command Parameter

Parameter of the command

This field shows the parameter specified when the command is executed.