You are currently viewing Create AS400 Audit Security Journal

Create AS400 Audit Security Journal

Audit security journals are often also known as the System Journal. All system activities can be recorded by this Journal. Objects for the System Journal are always named QAUDJRN in the QSYS library (default rule). The following steps in creating a System Journal:

Create Journal Receiver

Journal receivers from the journaling system have no fixed rules, but for convenience, we make the receiver in the QSYS library to be the same as the Journal. Through the command line type CRTJRNRCV (Create Journal Receiver) then press F4.

Type Journal Receiver and Library name, press Enter. Message Journal receiver QAUDRCV created in library QSYS will come out at the botom the green screen..

Membuat Journal QSYS/QAUDJRN

From command line, type CRTJRN (Create Journal) then press F4.

Type QAUDJRN at Journal and QSYS pada Library, type Journal Receiver and Library name created before, lalu tekan Enter. Message Journal QAUDJRN created in library QSYS will come out at the botom the green screen.

Change QAUDLVL dan QAUDLVL2 System Value

QAUDLVL and QAUDLVL2 are system values that contain what activities will be recorded by QAUDJRN. Type the WRKSYSVAL QAUDLVL* command then press Enter.

Type option 2=Change at system value QAUDLVL then press Enter.
Default for new AS400 installation, the value are *NONE
Following the list that I use, you can fill in the values as needed. To find out the list of values and their information, you can use F1 Help.

Because I have enough with the list above, QAUDLVL2 is still left * NONE without changes.

Change QAUDCTL System Value

System value inilah yang sebagai titik mulai Audit Journal dimulai, ketika sudah diubah. SysVal ini dapat diubah jika journal QSYS/QAUDJRN sudah dibuat. Ketik command WRKSYSVAL QAUDCTL lalu tekan Enter.

This system value is the starting point for the Audit Journal to log the activity, when it has been changed. This SysVal can be changed if the QSYS / QAUDJRN journal has been created also. Type the WRKSYSVAL QAUDCTL command then press Enter.

Type 2=Change at QAUDCTL then press Enter.
Default for new AS400 installation, the value are *NONE
Change the parameters to the following 3 lists: *OBJAUD *AUDLVL *NOQTEMP

Congratulations, Audit Journal is active.

Tags: , , , , , ,

Leave a Reply