Cleanup and deactivation of SMF exits

About this task

The C2POLICE started task shares the zSecure SMF exits with the CKQEXSMF started task that can be used to collect SMF records for CKQRADAR. If CKQEXSMF is not yet active, the SMF exit routines are installed as Dynamic Exit routines.

If CKQEXSMF is already active, the exits that CKQEXSMF installed send selected events to the buffers that C2POLICE maintains and the other way around. If you stop either C2POLICE or CKQEXSMF, the exits continue to be used for the other task. If you stop both CKQEXSMF and C2POLICE, the exits are uninstalled. It is important that the same level of the zSecure code is used for CKQEXSMF and C2POLICE.

If both CKQEXSMF and C2POLICE are stopped, but the exits are still installed and active, some residual processing is done by the exit routines to check for the presence of either task. In this case you might want to manually deactivate the SMF exit routines. If you do this while either CKQEXSMF or C2POLICE is still active, SMF events are no longer captured; this results in missing events in CKQRADAR and possibly missing alerts from C2POLICE.

Use the following procedure to manually remove residual SMF exits.

Procedure

  1. Issue the following commands to determine whether the SMF exit modules are active and under what exit names: 
    d prog,exit,mod=c2psmfu8
d prog,exit,mod=c2psmf86
    The output looks like the following example:
    CSV462I 13.11.54 PROG,EXIT DISPLAY 494
MODULE C2PSMFU8
EXIT(S) SYS.IEFU85 SYS.IEFU84 SYS.IEFU83
EXIT(S) SYSTSO.IEFU83 SYSSTC.IEFU83 SYSASCH.IEFU83
EXIT(S) SYSJES2.IEFU83 SYSJES3.IEFU83 SYSTSO.IEFU84
EXIT(S) SYSJES3.IEFU84 SYSASCH.IEFU84 SYSJES2.IEFU84
EXIT(S) SYSSTC.IEFU84 SYSTSO.IEFU85 SYSSTC.IEFU85
EXIT(S) SYSASCH.IEFU85 SYSJES2.IEFU85 SYSJES3.IEFU85
  2. Deactivate each exit by name: 
    setprog exit,modify,en=<exit name>,mod=c2psmfu8,state=inactive