What does zERT aggregation collect?

The zERT aggregation function creates summary records of the information collected by the zERT discovery function. The zERT aggregation function summarizes, or aggregates, the zERT discovery information in terms of the security sessions. These summary records are reported at regular intervals as SMF Type 119 subtype 12 records. The reporting interval is the global SMF interval unless a zERT aggregation-specific recording interval is configured with the INTVAL parameter on the GLOBALCONFIG ZERT AGGREGATION statement.