Justin, I just got into ChatGPT and asked this question:
"on an ibm i system, do you know anything about how to audit an output
queue object?"
And this is really amazing, this is what it replied to me. I recognize this
is not my own answer, but, hey, this is wonderful!
Here's the reply, maybe this is it:
"Yes, on an IBM i system, you can audit an output queue object using the
Audit Journal. The Audit Journal is a system log that records
security-related events and activities on the system, such as changes to
objects or user access to objects.
To audit an output queue object, you can follow these steps:
1.
Ensure that auditing is enabled for the system. You can check this by
running the command DSPAUDCTL, which will show you the current status of
system auditing.
2.
Set the auditing level for the output queue object. You can do this by
running the CHGOBJAUD command and specifying the output queue object and
the desired audit level. For example, to set the audit level to *ALL for
output queue MYOUTQ in library MYLIB, you would run the command:
CHGOBJAUD OBJ(MYLIB/MYOUTQ) OBJAUD(*ALL)
This will cause all security-related events related to the output queue,
such as changes to the object, to be recorded in the Audit Journal.
3.
Monitor the Audit Journal for events related to the output queue object.
You can use the DSPAUDJRNE command to view the contents of the Audit
Journal and filter by object name or user ID. For example, to display all
audit events related to output queue MYOUTQ, you would run the command:
DSPAUDJRNE ENTTYP(OBJ) OBJ(MYLIB/MYOUTQ)
This will show you a list of security-related events that have occurred
on the output queue, such as changes to the object or user access to the
object.
By auditing your output queue objects using the Audit Journal, you can
track and monitor changes to the objects and ensure that they are being
accessed and used appropriately by authorized users."
This is fun!
El mié, 8 mar 2023 a las 16:53, Justin Taylor (<jtaylor.0ab@xxxxxxxxx>)
escribió:
Is there a way to audit all spooled file activities (create, move, change,
delete) for a specific output queue? The auditing I've found seems to be
user-centric, and I'd rather not audit all users for every output queue
just to watch a single OUTQ.
TIA
--
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing list
To post a message email: MIDRANGE-L@xxxxxxxxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: https://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxxxxxxxx
Before posting, please take a moment to review the archives
at https://archive.midrange.com/midrange-l.
Please contact support@xxxxxxxxxxxxxxxxxxxx for any subscription related
questions.
midrange.com
