Darryl,
When you've displayed QAUDJRN place a 5 next to the entry in question and press enter. You will be shown 1 of 2 screens. If the screen heading says " Display Journal Entry" press F10.
The screen will change and the screen heading will say " Display Journal Entry Details". Toward the bottom you'll see " Job . . . . . . . . :". The information to the right of this will be the job identifier (jobnumber/jobuser/jobname) for the job that generated the journal entry. Copy, or write down, the job identifier.
Now go back to the command line and run the DSPJRN command again but supply the job identifier you copied/wrote down.
DSPJRN JRN(QAUDJRN) yoursettings JOB(jobnumber/jobuser/jobname) OUTPUT(*OUTFILE) OUTFILFMT(*TYPE5) OUTFILE(yourlib/yourfile) +
ENTDTALEN(*CALC) NULLINDLEN(*CALC)
yoursettings = your receiver range, date range, etc.
yourlib = the name of your library
yourfile = the name you want to use for the output file name.
This will give you something to sort and search. Using *TYPE5 gives you the client IP address if it is known in addition to some other stuff that can be valuable.
In the outfile there is a field named JOESD (journal entry specific data). The format of this data varies depending upon the journal code and entry type. For code T the entry formats are in the security manual appendix F.
http://publib.boulder.ibm.com/infocenter/iseries/v5r4/index.jsp
i5/OS Information Center, Version 5 Release 4/Security/Security Reference
You can use the tool of your choice to parse/scan/decipher JOESD.
HTH.
Gary
-----Original Message-----
From: midrange-l-bounces@xxxxxxxxxxxx [mailto:midrange-l-bounces@xxxxxxxxxxxx] On Behalf Of Darryl Freinkel
Sent: Tuesday, December 20, 2011 11:03 AM
To: midrange-l@xxxxxxxxxxxx
Subject: How do I display entries in the QAUDJRN journals?
I found an example of displaying the journals and I displayed 1 of the receivers.
It seems I have a problem with a FTP process. The code is T and the Type is ZR which is a read.
How would I go about displaying the contents of the entry to determine what is causing the entry?
Darryl Freinkel
Assignment 400 Group, Inc.
Tel: 770.321.8562 ext 111 | Fax 770.321.8562 | 2247 La Salle Dr, Marietta GA, 30062, USA | PO Box 72556, Marietta, GA 30007-2556
--
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing list To post a message email: MIDRANGE-L@xxxxxxxxxxxx To subscribe, unsubscribe, or change list options,
visit:
http://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxx Before posting, please take a moment to review the archives at
http://archive.midrange.com/midrange-l.
midrange.com
