RE: Audit journal entries

["John Earl" <john.earl@xxxxxxxxxxxxxxxxxx>]

Look in the Security Reference manual for a complete listing of Audit
Journal Entry types.

A ZC is an Audit Type entry that indicates that an object was changed - or
more exactly in the case of a data file - that the file was opened for
change.  If you are getting 200K of these an hour, one has to wonder about
the efficiency of the program (Note: this is an example of the QAUDJRN
acting as a performance sleuth).  It would seem to indicate that a program
is opening and closing the file 200,000+ times per hour.  This program may
be ripe for a redesign that does not continuously open and close the file.
Constantly opening and closing a file (and probably the associated program)
would be a rather expensive operation (understated - I'm sure).

One more thought - the ZC entry is likely the result of someone turning on
object auditing for either the file in question, or for the User who is
running the batch job.  You may want to look at those two items to determine
if that level of auditing is appropriate - after you address the performance
issues.

jte


--
John Earl | Chief Technology Officer
The PowerTech Group
19426 68th Ave. S
Seattle, WA 98032
(253) 872-7788 ext. 302
john.earl@xxxxxxxxxxxxxxxxxx
www.powertech.com 
 

--
 

> -----Original Message-----
> From: midrange-l-bounces@xxxxxxxxxxxx [mailto:midrange-l-
> bounces@xxxxxxxxxxxx] On Behalf Of ouuch@xxxxxxxxxxx
> Sent: Tuesday, May 06, 2003 11:28 AM
> To: midrange Systems Technical Discussion
> Subject: Audit journal entries
> 
> Hello,
> 
> we are looking at the QAUDJRN and find that we are having lots of object
> change (ZC) entries
> for a specific job. This batch job basically runs all day and checks for
> records in a workfile.
> 
> When the job is busy, I find some 200.000 journal entries per hour. The
> program named in
> these entries is an RPG-program (the last in the call-chain). The program
> is quit via RETRN.
> 
> How do I find out what these ZC journal entries mean?
> 
> Thanks,
> 
> Oliver
> _______________________________________________
> This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing
> list
> To post a message email: MIDRANGE-L@xxxxxxxxxxxx
> To subscribe, unsubscribe, or change list options,
> visit: http://lists.midrange.com/mailman/listinfo.cgi/midrange-l
> or email: MIDRANGE-L-request@xxxxxxxxxxxx
> Before posting, please take a moment to review the archives
> at http://archive.midrange.com/midrange-l.