Skip to main content

EasySMF Indexes

The EasySMF Splunk apps create indexes for different types of data.

Multiple indexes allow you to configure different space requirements and data retention settings for different types of data.

EasySMF for z/OS​

IndexDescription
easysmf_metricsMetrics for the EasySMF Real Time agent
easysmf_statusEasySMF status messages
easysmf_job_eventsJob and step start, end and interval information from SMF type 30 records
easysmf_dataset_eventsDataset and file activity
easysmf_rmf_metricsInformation from RMF records
easysmf_tcpip_eventsTCP/IP events from SMF 119 records
easysmf_zos_eventsMiscellaneous z/OS events - SMF 90 and others
easysmf_zos_metricsNon-RMF z/OS metrics

EasySMF for RACF​

IndexDescription
easysmf_racf_eventsRACF events from SMF type 80 records

Evaluate the space usage and data retention settings for each index according to your requirements.