Correct me if I'm wrong but doesn't every journal entry have this row:
Job . . . . . . . . : 740726/MIMIXOWN/JRNMGR
There's also this:
CHGOBJAUD OBJ(QSHELL/QSH) OBJTYPE(*CMD) OBJAUD(*ALL)
CHGOBJAUD OBJ(QSHELL/strQSH) OBJTYPE(*CMD) OBJAUD(*ALL)
DSPJRN JRN(QAUDJRN) FROMTIME(102815 1328)
Sequence Code Type Object Library Job
5248318 T CD ROBS1
5248319 T GS ROBS1
I journaled the 'root' command in qshell. When I executed the proxy
command in qsys it still logged the audit.
Entry specific data
'CQSH QSHELL *CMD NQSYS/QSH'
You can see the root lib and the proxy lib.
Code . . . . . . . . : T - Audit trail entry
Type . . . . . . . . : CD - Command string
Is the fact that "Object" and "Type" are blank? I can see where that
might make your life difficult. At that time you'll have to look at the
"entry specific data".
The GS entry tells you less. The object fails to appear, even in the
"entry specific data", of the GS entry.
This thread ...
RE: Identifying what job is calling QSH, (continued)
This mailing list archive is Copyright 1997-2019 by midrange.com and David Gibbs as a compilation work. Use of the archive is restricted to research of a business or technical nature. Any other uses are prohibited. Full details are available on our policy page. If you have questions about this, please contact