Rob,

I put some code here:

http://code.midrange.com/9de61a4f52.html

Just a simple program to automate the looking.

Bryan Dietz


On Tue, Sep 16, 2008 at 4:51 PM, <rob@xxxxxxxxx> wrote:
Thanks. This works great
DSPJRN JRN(QAUDJRN)
RCVRNG(...)
FROMTIME(mmddyy hhmm)
JRNCDE((T))
ENTTYP(PW)

Rob Berendt
--
Group Dekko Services, LLC
Dept 01.073
Dock 108
6928N 400E
Kendallville, IN 46755
http://www.dekko.com





"bryan dietz" <bdietz400@xxxxxxxxx>
Sent by: midrange-l-bounces@xxxxxxxxxxxx
09/16/2008 12:41 PM
Please respond to
Midrange Systems Technical Discussion <midrange-l@xxxxxxxxxxxx>


To
"Midrange Systems Technical Discussion" <midrange-l@xxxxxxxxxxxx>
cc

Subject
Re: CPF1397 - Subsystem QINTER varied off work station QPADEV001T for user
ERBERBERBE.






Rob look in the AUDJRN. IF you are logging security events you will
see PW entries.

happy hunting.

Bryan

On Tue, Sep 16, 2008 at 11:55 AM, <rob@xxxxxxxxx> wrote:
We created the message queue QSYS/QSYSMSG which will then automatically
copy "critical" messages from QSYSOPR to it, merely by it's existence.

I am seeing a plethora of CPF1397 - Subsystem QINTER varied off work
station QPADEV001T for user ERBERBERBE. genre of messages. How do I
track
these down and kill the guilty party?

Subsystem QINTER varied off work station QPADEV001T for user ERBERBERBE.
Subsystem QINTER varied off work station QPADEV002D for user WHB5H3W5G3.
Subsystem QINTER varied off work station QPADEV002J for user Q5HG345GER.
Subsystem QINTER varied off work station QPADEV002H for user SDVSDVWDVS.
Subsystem QINTER varied off work station QPADEV002G for user SDVSDVASDS.
Subsystem QINTER varied off work station QPADEV002L for user ASDVASDVWD.
Subsystem QINTER varied off work station QPADEV001C for user DVWDVWSDAV.
Subsystem QINTER varied off work station QPADEV001N for user XASDVWSDVA.
Subsystem QINTER varied off work station QPADEV001M for user WG3VSDAVSA.
Subsystem QINTER varied off work station QPADEV002Q for user WDFVWDVSDV.
Subsystem QINTER varied off work station QPADEV002N for user SDVDSVDSVS.

Is there even a way to see the last IP address associated with that
device? Granted, with DHCP it's not a sure cure, but it will help to
limit it down.

Rob Berendt
--
Group Dekko Services, LLC
Dept 01.073
Dock 108
6928N 400E
Kendallville, IN 46755
http://www.dekko.com

--
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing
list
To post a message email: MIDRANGE-L@xxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxx
Before posting, please take a moment to review the archives
at http://archive.midrange.com/midrange-l.





--

bryan
--
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing
list
To post a message email: MIDRANGE-L@xxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxx
Before posting, please take a moment to review the archives
at http://archive.midrange.com/midrange-l.


--
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing list
To post a message email: MIDRANGE-L@xxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxx
Before posting, please take a moment to review the archives
at http://archive.midrange.com/midrange-l.






This thread ...

Replies:

Follow On AppleNews
Return to Archive home page | Return to MIDRANGE.COM home page

This mailing list archive is Copyright 1997-2019 by midrange.com and David Gibbs as a compilation work. Use of the archive is restricted to research of a business or technical nature. Any other uses are prohibited. Full details are available on our policy page. If you have questions about this, please contact [javascript protected email address].