It looks to me like you get ZC and ZR records if you turn on object auditing for the message queue.
Display Object Description - Full
Library 1 of 1
Object . . . . . . . : QSYSOPR Attribute . . . . . :
Library . . . . . : QSYS Owner . . . . . . . : QSYS
Library ASP device . : *SYSBAS Library ASP group . : *SYSBAS
Type . . . . . . . . : *MSGQ Primary group . . . : *NONE
Change/Usage information:
Change date/time . . . . . . . . . . : 05/14/21 11:51:04
Usage data collected . . . . . . . . : YES
Last used date . . . . . . . . . . . :
Days used count . . . . . . . . . . : 0
Reset date . . . . . . . . . . . . :
Allow change by program . . . . . . : YES
Auditing/Integrity information:
Object auditing value . . . . . . . : *ALL
Digitally signed . . . . . . . . . . : NO
On Fri, 2021-05-14 at 11:13 -0500, ~TA~ wrote:
I had already done DSPLOG and there was no mention of QSYSOPR in it.
DSPOBJAUT did not reveal anything helpful.
I'm looking to set up QAUDJRN with the appropriate config to see
'whodunit' the next time it happens.
Thanks.
On 5/14/2021 10:18 AM, Mark Waterbury wrote:
Tim,
Issue DSPOBJAUT QSYSOPR *MSGQ to see what user or group profiles may have enough authority to do that.
Also, DSPLOG LOG(QHST) PERIOD((*AVAIL *BEGIN)) OUTPUT(*PRINT) and then search the resulting spool file for "QSYSOPR" -- perhaps you may see a message in there showing "who done it"?
Hope that helps,
Mark S. Waterbury
> On Friday, May 14, 2021, 11:10:39 AM EDT, ~TA~ <
<mailto:tadair@xxxxxxxxxxxxxxxx>
tadair@xxxxxxxxxxxxxxxx
wrote:
I'm attempting to set up QAUDJRN to determine who is clearing the system
operator message queue (QSYSOPR). I've searched the archive, I've
searched the internet, and I still can't seem to find a straight-up
answer. I would appreciate someone pointing me in the right direction.
We're on 7.3.
Thanks in advance.
[
https://www.medtronsoftware.com/img/MedtronMinilogo.bmp] Kevin Bucknum
Senior Programmer Analyst
MEDDATA / MEDTRON
120 Innwood Drive
Covington LA 70433
Local: 985-893-2550
Toll Free: 877-893-2550
https://www.medtronsoftware.com
CONFIDENTIALITY NOTICE
This document and any accompanying this email transmission contain confidential information, belonging to the sender that is legally privileged. This information is intended only for the use of the individual or entity named above. The authorized recipient of this information is prohibited from disclosing this information to any other party and is required to destroy the information after its stated need has been fulfilled. If you are not the intended recipient, or the employee of agent responsible to deliver it to the intended recipient, you are hereby notified that any disclosure, copying, distribution or action taken in reliance on the contents of these documents is STRICTLY PROHIBITED. If you have received this email in error, please notify the sender immediately to arrange for return or destruction of these documents.
midrange.com
