RE: Journaling

I think I would like to start with the security auditing then move into the
db auditing

-----Original Message-----
From: midrange-l-bounces@xxxxxxxxxxxx
[mailto:midrange-l-bounces@xxxxxxxxxxxx] On Behalf Of Wilt, Charles
Sent: Friday, May 12, 2006 9:49 AM
To: Midrange Systems Technical Discussion
Subject: RE: Journaling

John,

What are you trying to do?

The article Nick mentioned is talking about Security Auditing.  Security
Auditing tracks security related changes in the system "Audit Journal."

In fact, the second paragraph says: "When we speak of security auditing,
we are not talking about journaling database files and other
objects. We are not taking before and after images of data records."

So are you interested in Security Auditing or the journaling of database
files and other objects?

If you're interested in both, that's fine.  They are both useful for
different reasons and every shop should be taking advantage of both.
- Security Auditing can tell you who change a DB file's properties such
as the file's owner.
- DB Journaling can tell you who/what/when/how fields changed in a
particular record in a DB file.  (The why you have to beat out of the
who ;-)

Dan's article is a good point to start for Security auditing.

Do you have questions about journaling database files and other objects?

HTH,

Charles Wilt
--
iSeries Systems Administrator / Developer
Mitsubishi Electric Automotive America
ph: 513-573-4343
fax: 513-398-1121
  

> -----Original Message-----
> From: midrange-l-bounces@xxxxxxxxxxxx 
> [mailto:midrange-l-bounces@xxxxxxxxxxxx] On Behalf Of John Candidi
> Sent: Friday, May 12, 2006 10:04 AM
> To: 'Midrange Systems Technical Discussion'
> Subject: RE: Journaling
> 
> I am not 100% sure but what I do know is that I want to start 
> off with the
> best basic practice and move forward from there. I guess I am 
> looking for
> some experienced advice. The article Nick sent seemed like a 
> great starting
> point
> 
> -----Original Message-----
> From: midrange-l-bounces@xxxxxxxxxxxx
> [mailto:midrange-l-bounces@xxxxxxxxxxxx] On Behalf Of Wilt, Charles
> Sent: Friday, May 12, 2006 6:32 AM
> To: Midrange Systems Technical Discussion
> Subject: RE: Journaling
> 
> John,
> 
> "journaling" by itself is usually used to refer to journaling data
> object changes.
> 
> However, you mention the CHGOBJAUD command which is used to along with
> the relevant system and user profile values to control "Audit
> Journaling"
> 
> Which type of journaling are you talking about?
> 
> Charles Wilt
> --
> iSeries Systems Administrator / Developer
> Mitsubishi Electric Automotive America
> ph: 513-573-4343
> fax: 513-398-1121
>   
> 
> > -----Original Message-----
> > From: midrange-l-bounces@xxxxxxxxxxxx 
> > [mailto:midrange-l-bounces@xxxxxxxxxxxx] On Behalf Of John Candidi
> > Sent: Thursday, May 11, 2006 12:57 PM
> > To: 'Midrange Systems Technical Discussion'
> > Subject: Journaling
> > 
> > We don't use journaling at the present. I would like to turn 
> > it on but I'm
> > not sure of some things?
> > 
> >  
> > 
> > Should all objects and type be journaled. I don't want to 
> > journal so much as
> > to start chewing up storage. I thought we could start bay 
> > journaling just
> > object type *FILE changes. 
> > 
> >  
> > 
> > Can users be on the system when run the chgobjaud job?
> > 
> >  
> > 
> > I understand this is general but any other thoughts, ideas 
> > would be welcome
> > 
> >  
> > 
> > John A Candidi
> > 
> > Rutgers Insurance Companies
> > 
> > IT Director - AS/400 Manager
> > 
> > 856-779-2274
> > 
> >  
> > 
> >  
> > 
> > -- 
> > This is the Midrange Systems Technical Discussion 
> > (MIDRANGE-L) mailing list
> > To post a message email: MIDRANGE-L@xxxxxxxxxxxx
> > To subscribe, unsubscribe, or change list options,
> > visit: http://lists.midrange.com/mailman/listinfo/midrange-l
> > or email: MIDRANGE-L-request@xxxxxxxxxxxx
> > Before posting, please take a moment to review the archives
> > at http://archive.midrange.com/midrange-l.
> > 
> > 
> 
> -- 
> This is the Midrange Systems Technical Discussion 
> (MIDRANGE-L) mailing list
> To post a message email: MIDRANGE-L@xxxxxxxxxxxx
> To subscribe, unsubscribe, or change list options,
> visit: http://lists.midrange.com/mailman/listinfo/midrange-l
> or email: MIDRANGE-L-request@xxxxxxxxxxxx
> Before posting, please take a moment to review the archives
> at http://archive.midrange.com/midrange-l.
> 
> -- 
> This is the Midrange Systems Technical Discussion 
> (MIDRANGE-L) mailing list
> To post a message email: MIDRANGE-L@xxxxxxxxxxxx
> To subscribe, unsubscribe, or change list options,
> visit: http://lists.midrange.com/mailman/listinfo/midrange-l
> or email: MIDRANGE-L-request@xxxxxxxxxxxx
> Before posting, please take a moment to review the archives
> at http://archive.midrange.com/midrange-l.
> 
>