RE: STRSQL audit log

Disclaimer: This is a vendor answer. There may be other alternatives so
don't beat up the messenger.

I believe PowerTech's Authority Broker product, in conjunction with a
couple of programs you write, should satisfy your auditors. The
Authority Broker product itself has built-in auditing.

Here is how you could use it.

o Set up a switch pair or pairs depending upon your needs.
o Write an After Switch exit program that runs STRDBMON.
o Write an After Release exit program that runs ENDDBMON and reports
gathered activity.
o Assign these exit programs to their associated exit points for the
switch pair.

When the switch pair is used, the pair's command activity is recorded to
a secure journal. This activity can be reported in three ways: 1) To a
printed report, 2) To a database file and 3) To a stream file.

In conjunction with Authority Broker's database or stream file output
you can write your own audit report to incorporate what was gathered
with STRDBMON. As has been pointed out, changes to database records are
recorded in journals. If database change are also required by your
auditors they could be incorporated into your report as you see fit.
Authority Broker can report database changes but you are required to
journal your files to QAUDJRN. This is not a very popular method (dare
I say reviled) but it works.

For more information you may visit our website www.powertech.com.


Gary Monnier
The PowerTech Group, Inc.
www.powertech.com
253.872.7788


-----Original Message-----
From: midrange-l-bounces@xxxxxxxxxxxx
[mailto:midrange-l-bounces@xxxxxxxxxxxx] On Behalf Of Paul E.
Fenstermacher
Sent: Wednesday, May 21, 2008 5:53 AM
To: Midrange Systems Technical Discussion
Subject: STRSQL audit log


Our auditors want us to maintain a log of activity around this command
like we can do with DFU and DBU. Anyone know a way to do this? Thanks.



Paul Fenstermacher

Certified Specialist - i5 System Administration

Bass Pro Shops

417-873-5424 d

417-429-7694 c

paulf@xxxxxxxxxxx