RE: Audit journal create object entries question

Loyd,

You does seem an odd circumstance. Can you recreate the issue at will?

Anything unusual in the journal for job 684259/SHERMAN/QPADEV000P?

Anything from other jobs that might seem related within a few seconds one
way or the other of 11/07/2008 at 14:35:57? Is it possible a Change Control
process was replacing the commands when they were prompted for example?

- Gary



-----Original Message-----

date: Wed, 10 Dec 2008 13:22:49 -0500
from: <lgoodbar@xxxxxxxxxxxxxx>
subject: RE: Audit journal create object entries question

I don't see any indication CHGCMD was used.

November's report had two objects in this scenario: PROD_MOD/DBARPT2 and
PROD_MOD/IMPLOOKUP. Both are *CMD objects. Both are OPM CL menu driver
programs: WVCPROD and WVCPLNR. Both are prompted commands in the
respective CL source.

0036.00 ?dbarpt2
030827

0145.00 ? implookup
010219

Both show an "Entry type" of R (Replaced). Here is the journal entry
information, slightly reformatted.

Display Journal Entry

Object . . . . . . . : Library . . . . . . :
Member . . . . . . . :
Incomplete data . . : No Minimized entry data : *NONE
Sequence . . . . . . : 14841658
Code . . . . . . . . : T - Audit trail entry
Type . . . . . . . . : CO - Create object

Entry specific data
Column *...+....1....+....2....+....3....+....4....+....5
00001 'RDBARPT2 PROD_MOD *CMD '
00051 ' '
00101 ' '
00151 ' '
00201 ' '
00251 ' '
00301 ' '
00351 ' '
00401 ' '
00451 ' '
00501 ' '
00551 ' '
00601 ' '
00651 ' '
00701 ' *SYSBA'
00751 'S 00000'

Bottom

Display Journal Entry Details

Journal . . . . . . : QAUDJRN Library . . . . . . : QSYS

Sequence . . . . . . : 14841658
Code . . . . . . . . : T - Audit trail entry
Type . . . . . . . . : CO - Create object

Object . . . . . . . :
Type . . . . . . . :
Date . . . . . . . . : 11/07/08
Time . . . . . . . . : 14:35:57
Flag . . . . . . . . : 0
Count/RRN . . . . . : 0
Commit cycle ID . . : 0
Nested commit level : 0
Job . . . . . . . . : 684259/SHERMAN/QPADEV000P
User profile . . . . : SHERMAN
Ignore APY/RMV . . . : No
Ref constraint . . . : No
Trigger . . . . . . : No
Program . . . . . . : WVCPROD
Library . . . . . : PROD_MOD
ASP device . . . . : *SYSBAS
System sequence . . : 10367727908187889664
Thread identifier . : 0000000000000060
Receiver . . . . . . : AUDRCV4438
Library . . . . . : QGPL
ASP device . . . . : *SYSBAS
Journal identifier . : X'00000000000000000000'
Remote address . . . : 10.121.22.12
Address family . . . : IPv4
Remote port . . . . : 49635
System name . . . . : WVAS400
Arm number . . . . . : 3
Logical unit of work : *OMITTED
Transaction ID . . . : *OMITTED

Bottom

Display Object Description - Full
Library
1 of 1
Object . . . . . . . : DBARPT2 Attribute . . . . . :
Library . . . . . : PROD_MOD Owner . . . . . . . :
LGOODBAR
Library ASP device . : *SYSBAS Library ASP group . :
*SYSBAS
Type . . . . . . . . : *CMD Primary group . . . : *NONE

User-defined information:
Attribute . . . . . . . . . . . . . :
Text . . . . . . . . . . . . . . . . : Cycle counting accuracy
report

Creation information:
Creation date/time . . . . . . . . . : 08/27/03 12:57:53
Created by user . . . . . . . . . . : GOODBAR
System created on . . . . . . . . . : WVAS400
Object domain . . . . . . . . . . . : *SYSTEM
Change/Usage information:
Change date/time . . . . . . . . . . : 11/07/08 14:35:57
Usage data collected . . . . . . . . : YES
Last used date . . . . . . . . . . . : 04/16/07
Days used count . . . . . . . . . . : 132
Reset date . . . . . . . . . . . . :
Allow change by program . . . . . . : YES
Auditing/Integrity information:
Object auditing value . . . . . . . : *NONE
Digitally signed . . . . . . . . . . : NO
Storage information:
Size . . . . . . . . . . . . . . . . : 8192
Offline size . . . . . . . . . . . . : 8192
Associated space size . . . . . . . : 4096
Optimum space alignment . . . . . . : YES
Freed . . . . . . . . . . . . . . . : NO
Compressed . . . . . . . . . . . . . : INELIGIBLE
Object ASP number . . . . . . . . . : 1
Object overflowed . . . . . . . . : NO
Object ASP device . . . . . . . . . : *SYSBAS
Object ASP group . . . . . . . . . . : *SYSBAS
Journaling information:
Currently journaled . . . . . . . . : NO
Save/Restore information:
Save date/time . . . . . . . . . . . : 12/10/08 03:10:39
Restore date/time . . . . . . . . . : 03/27/04 22:15:04
Save command . . . . . . . . . . . . : SAVLIB
Device type . . . . . . . . . . . . : Tape
Sequence number . . . . . . . . . . : 5
Volumes . . . . . . . . . . . . . . : AS0024
File label ID . . . . . . . . . . . : PROD_MOD
Save format . . . . . . . . . . . . : Serial

Bottom


I could be wrong, but still believe it has to do with prompting.

--Loyd