z/OS SMF extractor reference manual
GREPST is used to define the beginning of E15 module and also instruct whether the SMF header (the first 24 bytes of each SMF record) is extracted through the HEADER parameter value. It is required to code once only.
GREPST HEADER=YES|NO
GREPE is used to extract a specific field from a SMF record and append to the current output record. The required field is defined through GREPSECD, GREPSECF, GREPFLDD, GREPFLD.
GREPE GREPSECD,
GREPSECF,
GREPFLDD,
GREPFLD
GREPSECF ,defined in DSECT GREPSECD, is the offset to the section containing GREPFLD defined in DSECT GREPFLLD.
GREPD is used to extract a specific section from a SMF record and append to the current output record.
GREPD GREPSECD,
GREPSECF,
GREPSECL
GREPSECF ,defined in DSECT GREPSECD, is the offset to the section. The required length is learnt from GREPSECL defined in DSECT GREPSECD. GREPSECF and GREPSECL are the standard triplet in SMF record.
GREPEM is used to extract one or more specific fields from multiple sections of a SMF record. Fields from each section will append to the current output record and direct to output immediately. Each output record contains fields from one section only.
GREPEM GREPSECD,GREPSECF,GREPSECL,GREPSECC,
GREPFLDD,(GREPFLD1,GREPFLD2,GREPFLD3,...)
GREPSECF, GREPSECL and GREPSECC ,the triplet information defined in DSECT GREPSECD, is the offset to the first section, the section length and the section countrespectively. The required fields are specified in GREPFLD1, GREPFLDx and defined in DSECT GREPFLDD. Multiple fields can be defined and used (field1, field2, field3,..) format. Extracted fields from a section is appended to the current output record with each output record only contains one extracted section.
For example, if the input record contains three sections, there will be three records output to with each record containing one section.
GREPDM is used to extract the specified sections of a SMF record with each output record containing one section.
GREPDM GREPSECD,GREPSECF,GREPSECL,GREPSECC
GREPSECF, GREPSECL and GREPSECC ,the triplet information defined in DSECT GREPSECD, is the offset to the first section, the section length and the section countrespectively. Extracted section is appended to the current output record with each output record only contains one extracted section.