Re: Spooled File audit journal entries

Excellent advice Rob!





rob@xxxxxxxxx
Sent by:
midrange-l-bounce To
s@xxxxxxxxxxxx Midrange Systems Technical
Discussion
<midrange-l@xxxxxxxxxxxx>
08/19/2008 04:00 cc
PM
Subject
Re: Spooled File audit journal
Please respond to entries
Midrange Systems
Technical
Discussion
<midrange-l@midra
nge.com>






Now, how hard would it have been to spool up a file, assign it to a writer
that's ended, wait a couple of minutes, and start the writer and see what
kind of journal entries are created? Maybe spool file create, change
(assigned to a different output queue), printed?

Rob Berendt
--
Group Dekko Services, LLC
Dept 01.073
Dock 108
6928N 400E
Kendallville, IN 46755
http://www.dekko.com





ChadB@xxxxxxxxxxxxxxxxxxxx
Sent by: midrange-l-bounces@xxxxxxxxxxxx
08/19/2008 03:41 PM
Please respond to
Midrange Systems Technical Discussion <midrange-l@xxxxxxxxxxxx>


To
midrange-l@xxxxxxxxxxxx
cc

Subject
Spooled File audit journal entries








I have a question about some 'actions against spooled files' audit journal
entries (as below):

SF A QSPLJOB Q04079N010 QSPL QPRINT2 0001 WNAC02X
QUSRSYS WNAC02X QSPLJOB 599383 2008-08-18-17.41.02.
SF A QSPLJOB Q04079N010 QSPL QPRINT 0002 WNAC02X
QUSRSYS WNAC02X QSPLJOB 599383 2008-08-18-17.41.05.
SF A QSPLJOB Q04079N010 QSPL QSYSPRT 0003 WNAC02X
QUSRSYS WNAC02X QSPLJOB 599383 2008-08-18-17.41.05.



I can't find a specific entry type listed for when the spooled files
print.
The "A" entry type says that it was read by another users... are these
also
written when a spooled file is printed to a printer? We suspect that's
when they printed (17:41ish) and would like to confirm it via the audit
journal entries...


--
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing
list
To post a message email: MIDRANGE-L@xxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxx
Before posting, please take a moment to review the archives
at http://archive.midrange.com/midrange-l.


--
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing list
To post a message email: MIDRANGE-L@xxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxx
Before posting, please take a moment to review the archives
at http://archive.midrange.com/midrange-l.


_____________________________________________________________________________

Scanned by IBM Email Security Management Services powered by MessageLabs.
For more information please visit http://www.ers.ibm.com
_____________________________________________________________________________