RE: Audit trail of file changes

From: James Rich

I noticed that the journal holds a lot more than just updates, adds,
and deletes; it also tracks every open, close, and backup.

STRJRNPF :

Help Journal entries to be omitted (OMTJRNE) - Help

Specifies the journal entries that are omitted.

*NONE
No journal entries are omitted.

*OPNCLO
Open and close entries are omitted. Open and close operations
on the specified file members do not create open and close
journal entries. This prevents the use of TOJOBO and TOJOBC
entries on the Apply Journaled Changes (APYJRNCHG) an Remove
Journaled Changes (RMVJRNCHG) commands, but it saves some
storage space in the attached receivers.

Is there a way to either purge unwanted data or only log updates?

As I tell the auditors every year, the data in the journal receiver cannot be changed by mortals.

Another thing that has me a little confused is that the record length
of the file I'm journaling is 1088 but the field in the journal that
I believe holds the changed data is only 100. How can it possibly
hold the before and after images when the field is so much smaller
that the record?

On CRTJRN, what did you specify for MINENTDTA? That can reduce what is stored on an update. Otherwise, it's likely you've done a DSPJRN to *OUTFILE and selected OUTFILFMT that doesn't show as much data as you want.

As for disk space usage, keep in mind Rob is journaling a LOT more than you want to, since he is mirroring to another system. For one file, with the number of changes you implied, you'll be able to keep the receivers for a long time. (Then again disk space is relative.)
--
Sean Porterfield

This email is confidential, intended only for the named recipient(s) above and may contain information that is privileged. If you have received this message in error or are not the named recipient(s), please notify the sender immediately and delete this email message from your computer as any and all unauthorized distribution or use of this message is strictly prohibited. Thank you.