Creating a Data Set for Users and Groups with the Rule Wizard
To create a data set for examining activity and developing rules for outgoing activity based the users and groups requesting it, select 41. Create Working Data Set from the Work with Users screen (STRFW > 3).
The Summarize User AS/400 Log (CPRUSRSEC) screen appears. From this screen, you can construct the command line command that creates the data set.
| Summarize User AS⁄400 Log (CPRUSRSEC) Type choices, press Enter. User . . . . . . . . . . . . . . *ALL Name, *ALL Group by . . . . . . . . . . . . *DFT *DFT, *USER, *GRPPRF... Allowed . . . . . . . . . . . . *ALL *YES, *NO, *ALL Starting date and time: Starting date . . . . . . . . *CURRENT Date, *CURRENT, *YESTERDAY... Starting time . . . . . . . . 000000 Time Ending date and time: Ending date . . . . . . . . . *CURRENT Date, *CURRENT, *YESTERDAY... Ending time . . . . . . . . . 235959 Time Number of records to process . . *NOMAX Number, *NOMAX Server ID . . . . . . . . . . . *ALL *ALL, *FILTFR, *FTPLOG... Bottom F3=Exit F4=Prompt F5=Refresh F12=Cancel F13=How to use this display F24=More keys |
The screen contains the following fields. Fields that have values other than the defaults are preceded by the ">" character:
User, <GrpPrf or '%GROUP'
The user or group requesting the activity. This can be a user name, a generic* name, a group name, a group profile, or *ALL for all users.
Group by
How the result are grouped in the data set. Possible values include:
- *DFT: The default grouping of data within rule wizards, as set in the Wizard Group by parameter in the Firewall General Definitions screen.
- *USER: Grouped by the user name.
- *GRPPRF: If a user is a member of a single group, the user's activity is included under the group.
Otherwise, the activity is shown under the username.
- *USRGRP: If the user is a member of multiple groups, the user's activity is included under the first of those groups.
Otherwise, the activity is shown under the username.
- *GROUP: If the user is a member of a single group, the user's activity is included under that group.
Otherwise, if the user is a member of multiple groups, the user's activity is listed under the first of those groups.
Otherwise (if the user is not a member of any groups), the activity is shown under the username.
- *ALLGRP: If the user is a member of a single group plus up to fifteen supplemental groups. The user's activity is shown for each of those groups.
- *ALL: If the user is a member of a single group plus up to fifteen supplemental groups. The user's activity is shown for each of those groups.
Otherwise, if the user is a member of multiple groups, the user's activity is listed under the first of those groups.
Otherwise (if the user is not a member of any groups), the activity is shown under the username.
- *ALLUSRGRP: If the user is a member of more than one %group, the user's activity is shown for each of those %groups.
Allowed
Specifies whether the data set includes rejected activity, accepted activity, or both.
- *YES: Include only accepted activity
- *NO: Include only rejected activity
- *ALL: Include both accepted and rejected activity
Starting date and time
Starting date
The day or date on which the included data begins.
Allowed values include:
- *CURRENT: The current date
- *YESTERDAY: Yesterday's date
- *WEEKSTR: The first day of the current week. By default, this is Sunday.
- *PRVWEEKS: The first day of the previous week
- *MONTHSTR: The first day of the current month
- *PRVMONTHS: The first day of the previous month
- *YEARSTR: The first day of the current year
- *PRVYEARS: The first day of the previous year
- *MON: Monday
- *TUE: Tuesday
- *WED: Wednesday
- *THU: Thursday
- *FRI: Friday
- *SAT: Saturday
- *SUN: Sunday
Starting time
The time on the Starting date at which the included data begins, in HHMMSS format.
Ending date
The day or date on which the included data ends.
Allowed values are the same as for Starting date.
Ending time
The time on the Starting date at which the included data ends, in HHMMSS format.
Number of records to process
Collect no more than this number of records. If set to *NOMAX, collect all the relevant records.
Server ID
The server that the activity is attempting to access. To see a list of possible values, press the F4 key.
When you press Enter, more fields appear:
Set to contain data
Set name
The name of the data set that will contain the records. You can set this to your own value or choose one of these options:
- *TEMP: The default name for temporary data sets. The data set is removed when the session ends.
- *USER: Your user name
- *S: Equivalent to *SELECT
- *SELECT: If the wizard has been run before, a list appears of previous names that had been used for the data set.
Replace or add records
If any records already exist in the data set, whether to replace them or add the new records to them.
Possible values include:
- *ADD: Add new records to the existing set
- *REPLACE: Replace all existing records with the new ones.
Wizard type
The type of wizard to be created. Possible values include:
- *STD: The Rule Wizard screen that appears next has all the standard options
- *FAST: The Rule Wizard screen that appears next has a limited set of options for faster processing, as documented there.
- *NO: The data set will only be used to batch processing.