RA/7

The RA/7 architecture is centered around three primary components: the SMF Data Collector, the Report Engine, and the Administration Interface. The SMF Data Collector, running as a started task, monitors and retrieves SMF records. It filters and processes these records based on predefined criteria, storing the relevant data in intermediate datasets.

The Report Engine, also a started task, utilizes the processed data to generate reports. Users define report parameters through the Administration Interface, specifying data fields, filtering criteria, and output formats. The Administration Interface, accessible via TSO/ISPF and CLI, provides a centralized management console.

It allows administrators to configure system settings, manage user accounts, and monitor system performance. Communication between components occurs primarily through VSAM datasets and internal z/OS interfaces. The SMF Data Collector writes processed data to VSAM datasets, which the Report Engine then reads to generate reports.

The Administration Interface interacts with the other components through z/OS system services and internal APIs. Security is a core aspect of the architecture. Authentication is handled via RACF user IDs and passwords, and access control is enforced through RACF profiles and permissions.

Encryption is used for sensitive data within configuration files and during network transmissions. Audit logging captures all user actions and system events, providing a comprehensive audit trail for security and compliance purposes. The REST API provides a programmatic interface for interacting with the system, enabling integration with other security tools and automation workflows.