Re: Security Auditing

[John Earl <johnearl@xxxxxxxxxxxxxxx>]

You can create (or modify) the security audit journal (QSYS/QAUDJRN)
by using the CHGSECAUD (Change Security Auditing) command.

When you use CHGSECAUD, specify AUDCTL(*AUDLVL).  Then if you're
interested in tracking deletes, specify that *DELETE is one of the
*AUDLVL's that you want to track.  The system will then log an entry
into the security audit journal everytime something is deleted.

hth,

jte



Michele Reinkemeyer wrote:
> 
> I have been asked to start running security audit on our AS/400.  Some of our
> customer service reps have a knack for deleting things we really really really
> need, so we are hoping to catch such and correct it.
> 
> Any suggestions or advice on how ya'll go about this or how you set it up to
> best serve your needs would be most helpful.
> 
> Thanks!
> 
> Michele R
> 
> +---
> | This is the Midrange System Mailing List!
> | To submit a new message, send your mail to MIDRANGE-L@midrange.com.
> | To subscribe to this list send email to MIDRANGE-L-SUB@midrange.com.
> | To unsubscribe from this list send email to MIDRANGE-L-UNSUB@midrange.com.
> | Questions should be directed to the list owner/operator: david@midrange.com
> +---

--
John Earl                                          
johnearl@powertechgroup.com
The PowerTech Group                        206-575-0711
PowerLock Network Security              www.400security.com
The 400 School                                www.400school.com
--
+---
| This is the Midrange System Mailing List!
| To submit a new message, send your mail to MIDRANGE-L@midrange.com.
| To subscribe to this list send email to MIDRANGE-L-SUB@midrange.com.
| To unsubscribe from this list send email to MIDRANGE-L-UNSUB@midrange.com.
| Questions should be directed to the list owner/operator: david@midrange.com
+---