Hello Kolusu
Q1 How to use DFSORT to select the first duplicate of multi-line messages
in Syslog
Below are multi-line messages from SYSLOG (PUSH=(140:ID=9))
INPUT Organization . . . : PS Record format . . . : FB
Record length . . . : 149
==========================================================================================================================
N 8000000 CUK1 18179 16:07:46.47 00000090 DSI556I DSILOG : VSAM
DATASET 'OPEN' COMPLETED, DDNAME = 'DSILOGP' 000000001
S RETURN
CODE = X'00', ACB ERROR FIELD = X'00'
000000001
N 8000000 CUK1 18179 16:07:46.50 00000090 DSI556I DSILOG : VSAM
DATASET 'OPEN' COMPLETED, DDNAME = 'DSILOGS' 000000002
S RETURN
CODE = X'00', ACB ERROR FIELD = X'00'
000000002
N 8000000 CUK1 18179 16:34:09.58 00000090 DSI556I DSILOG : VSAM
DATASET 'OPEN' COMPLETED, DDNAME = 'DSILOGS' 000000003
S RETURN
CODE = X'00', ACB ERROR FIELD = X'00'
000000003
N 8000000 CUK1 18179 16:34:10.92 00000090 DSI556I DSISVRT : VSAM
DATASET 'OPEN' COMPLETED, DDNAME = 'DSISVRT' 000000004
S RETURN
CODE = X'00', ACB ERROR FIELD = X'00'
000000004
==========================================================================================================================
We hope to get the following output
==========================================================================================================================
N 8000000 CUK1 18179 16:07:46.47 00000090 DSI556I DSILOG : VSAM
DATASET 'OPEN' COMPLETED, DDNAME = 'DSILOGP' 000000001
S RETURN
CODE = X'00', ACB ERROR FIELD = X'00'
000000001
N 8000000 CUK1 18179 16:07:46.50 00000090 DSI556I DSILOG : VSAM
DATASET 'OPEN' COMPLETED, DDNAME = 'DSILOGS' 000000002
S RETURN
CODE = X'00', ACB ERROR FIELD = X'00'
000000002
N 8000000 CUK1 18179 16:34:10.92 00000090 DSI556I DSISVRT : VSAM
DATASET 'OPEN' COMPLETED, DDNAME = 'DSISVRT' 000000004
S RETURN
CODE = X'00', ACB ERROR FIELD = X'00'
000000004
==========================================================================================================================
Q2. How to use DFSORT to compare two the Syslog depending on multi-line
messages.
The first input:
==========================================================================================================================
N 8000000 CUK1 18179 16:07:46.47 00000090 DSI556I DSILOG : VSAM
DATASET 'OPEN' COMPLETED, DDNAME = 'DSILOGP' 000000001
S RETURN
CODE = X'00', ACB ERROR FIELD = X'00'
000000001
N 8000000 CUK1 18179 16:07:46.50 00000090 DSI556I DSILOG : VSAM
DATASET 'OPEN' COMPLETED, DDNAME = 'DSILOGS' 000000002
S RETURN
CODE = X'00', ACB ERROR FIELD = X'00'
000000002
N 8000000 CUK1 18179 16:34:10.92 00000090 DSI556I DSISVRT : VSAM
DATASET 'OPEN' COMPLETED, DDNAME = 'DSISVRT' 000000004
S RETURN
CODE = X'00', ACB ERROR FIELD = X'00'
000000004
==========================================================================================================================
The second input :
==========================================================================================================================
N 8000000 CUK1 18179 16:34:10.92 00000090 DSI556I DSISVRT : VSAM
DATASET 'OPEN' COMPLETED, DDNAME = 'DSISVRT' 000000001
S RETURN
CODE = X'00', ACB ERROR FIELD = X'00'
000000001
==========================================================================================================================
Compare the first input with the second input
We hope to get the following output :
==========================================================================================================================
N 8000000 CUK1 18179 16:07:46.47 00000090 DSI556I DSILOG : VSAM
DATASET 'OPEN' COMPLETED, DDNAME = 'DSILOGP' 000000001
S RETURN
CODE = X'00', ACB ERROR FIELD = X'00'
000000001
N 8000000 CUK1 18179 16:07:46.50 00000090 DSI556I DSILOG : VSAM
DATASET 'OPEN' COMPLETED, DDNAME = 'DSILOGS' 000000002
S RETURN
CODE = X'00', ACB ERROR FIELD = X'00'
000000002
==========================================================================================================================
Q3 . Do we need to transfer multi-line messages to single-line messages? How to
transfer it?
Thanks a lot!
Jason
----------------------------------------------------------------------
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [email protected] with the message: INFO IBM-MAIN
