You're right. I didn't mean this to go to WDSC-I, and I didn't notice it
did until you said something.
___________________________________
Darren Strong
Dekko
From: Duane Scott <dscott@xxxxxxxxxxx>
To: "Rational Developer for IBM i / Websphere Development Studio
Client for System i & iSeries" <wdsci-l@xxxxxxxxxxxx>
Date: 10/20/2017 09:29 AM
Subject: Re: [WDSCI-L] SOX monitoring and journal interpreter
Sent by: "WDSCI-L" <wdsci-l-bounces@xxxxxxxxxxxx>
I'm a bit confused on the placement of this question. Should it be
somewhere other than RDi?
I agree with the need to make changes to data, somewhat, but mass changes
should be well documented outside of just the journaled file. Other
changes such as customer sending bad data should go through programs that
allow the user community to make those changes. But I get that IT doesn't
always have the time to create programs for that and if NOT a
controlled/audited part of the data should be allowed.
But I still don't understand what you are trying to do. If your problem
is with RPG, should you move this there to get the expertise you are
looking for?
Duane
-----Original Message-----
From: WDSCI-L [mailto:wdsci-l-bounces@xxxxxxxxxxxx] On Behalf Of Darren
Strong
Sent: Friday, October 20, 2017 9:02 AM
To: Rational Developer for IBM i / Websphere Development Studio Client for
System i & iSeries <wdsci-l@xxxxxxxxxxxx>
Subject: Re: [WDSCI-L] SOX monitoring and journal interpreter
In our environment, IT does need to make changes to data on the production
machine. Reasons include, mass data changes, messaging software support,
high availability software support, priming data changes for modification
or new programs, customers sending bad data via EDI that has to be
corrected because they refuse to send correction, malfunction in program
writing incorrect data either by program design or user error. Its
difficult for me to imagine a world where things are so perfect that IT
wouldn't have to make data level changes on the production system.
___________________________________
Darren Strong
Dekko
From: Vernon Hamberg <vhamberg@xxxxxxxxxxxxxxx>
To: wdsci-l@xxxxxxxxxxxx
Date: 10/20/2017 08:43 AM
Subject: Re: [WDSCI-L] SOX monitoring and journal interpreter
Sent by: "WDSCI-L" <wdsci-l-bounces@xxxxxxxxxxxx>
Hi Darren
This depends on what "activity" means - we don't allow developers to
change data on the production LPARs, so we don't have to record that kind
of thing.
In a very simplistic way, I think of SOX as related to ensuring process
- how things are done.
We use Turnover change management app - it generates logs for each
promotion/distribution to production - we convert these SPLFs to PDFs and
store for auditing later.
If there are changes to file formats, say, those are logged by Turnover,
and Turnover takes care of preserving the data.
So it seems to me that you don't need to go at some types of file changes
- you mention "actual file data" - I would think it rare that developers
can even DO that.
HTH
Vern
On 10/20/2017 7:25 AM, Darren Strong wrote:
Thanks to SOX we're asked to develop a system to monitor activity by
developers on the production system (An IBM i). First, has anyone else
done something like this, and in an overview, how did you do it?
For my attempt, I'm summarizing file journal entries based on some
criteria, like user, and generating a summary report/spreadsheet with
a concatenated key. Then from that, I want to allow an auditor to
drill
into
that summary to get the detail of file changes. For now, I'm
copy/pasting
this "key" into another report program that is going to report change
by change, what happened in that file for that user, job, etc.
Anyway, I'm using the DISPLAY_JOURNAL SQL table function, and I have
this
huge and varying format ENTRY_DATA column. This is where the actual
file data is. I'd like to split this into the file's columns on the
spreadsheet, which I could do if it was all character data, but I'm
having
trouble figuring out how to split numerics of varying size and format
into
something in an RPG variable. If I use %subst to break a chunk of the
buffer out, what kind of field would I feed that into, because the
datatypes will vary so much?
___________________________________
Darren Strong
Dekko
--
This is the Rational Developer for IBM i / Websphere Development Studio
Client for System i & iSeries (WDSCI-L) mailing list To post a message
email: WDSCI-L@xxxxxxxxxxxx To subscribe, unsubscribe, or change list
options,
visit:
https://lists.midrange.com/mailman/listinfo/wdsci-l
or email: WDSCI-L-request@xxxxxxxxxxxx
Before posting, please take a moment to review the archives at
https://archive.midrange.com/wdsci-l.
--
This is the Rational Developer for IBM i / Websphere Development Studio
Client for System i & iSeries (WDSCI-L) mailing list To post a message
email: WDSCI-L@xxxxxxxxxxxx To subscribe, unsubscribe, or change list
options,
visit:
https://lists.midrange.com/mailman/listinfo/wdsci-l
or email: WDSCI-L-request@xxxxxxxxxxxx
Before posting, please take a moment to review the archives at
https://archive.midrange.com/wdsci-l.
CONFIDENTIALITY NOTICE: This electronic message transmission is intended
only for the person or entity to which it is addressed and may contain
information that is privileged, confidential or otherwise protected from
disclosure. If you have received this transmission, but are not the
intended recipient, you are hereby notified that any disclosure, copying,
distribution or use of the contents of this information is strictly
prohibited. If you have received this e-mail in error, please contact NALC
Health Benefit Plan at 703-729-4677 and delete and destroy the original
message and all copies.
midrange.com
