× The internal search function is temporarily non-functional. The current search engine is no longer viable and we are researching alternatives.
As a stop gap measure, we are using Google's custom search engine service.
If you know of an easy to use, open source, search engine ... please contact support@midrange.com.


  1.  Home
  2. WDSCI-L
  3. October 2017

Re: SOX monitoring and journal interpreter

I only mentioned it because I think I'm guilty of doing it too.

Duane

-----Original Message-----
From: WDSCI-L [mailto:wdsci-l-bounces@xxxxxxxxxxxx] On Behalf Of Darren Strong
Sent: Friday, October 20, 2017 9:31 AM
To: Rational Developer for IBM i / Websphere Development Studio Client for System i & iSeries <wdsci-l@xxxxxxxxxxxx>
Subject: Re: [WDSCI-L] SOX monitoring and journal interpreter

You're right. I didn't mean this to go to WDSC-I, and I didn't notice it did until you said something.

___________________________________
Darren Strong
Dekko





From: Duane Scott <dscott@xxxxxxxxxxx>
To: "Rational Developer for IBM i / Websphere Development Studio
Client for System i & iSeries" <wdsci-l@xxxxxxxxxxxx>
Date: 10/20/2017 09:29 AM
Subject: Re: [WDSCI-L] SOX monitoring and journal interpreter
Sent by: "WDSCI-L" <wdsci-l-bounces@xxxxxxxxxxxx>



I'm a bit confused on the placement of this question. Should it be somewhere other than RDi?

I agree with the need to make changes to data, somewhat, but mass changes should be well documented outside of just the journaled file. Other changes such as customer sending bad data should go through programs that allow the user community to make those changes. But I get that IT doesn't always have the time to create programs for that and if NOT a controlled/audited part of the data should be allowed.

But I still don't understand what you are trying to do. If your problem is with RPG, should you move this there to get the expertise you are looking for?

Duane

-----Original Message-----
From: WDSCI-L [mailto:wdsci-l-bounces@xxxxxxxxxxxx] On Behalf Of Darren Strong
Sent: Friday, October 20, 2017 9:02 AM
To: Rational Developer for IBM i / Websphere Development Studio Client for System i & iSeries <wdsci-l@xxxxxxxxxxxx>
Subject: Re: [WDSCI-L] SOX monitoring and journal interpreter

In our environment, IT does need to make changes to data on the production machine. Reasons include, mass data changes, messaging software support, high availability software support, priming data changes for modification or new programs, customers sending bad data via EDI that has to be corrected because they refuse to send correction, malfunction in program writing incorrect data either by program design or user error. Its difficult for me to imagine a world where things are so perfect that IT wouldn't have to make data level changes on the production system.



___________________________________
Darren Strong
Dekko





From: Vernon Hamberg <vhamberg@xxxxxxxxxxxxxxx>
To: wdsci-l@xxxxxxxxxxxx
Date: 10/20/2017 08:43 AM
Subject: Re: [WDSCI-L] SOX monitoring and journal interpreter
Sent by: "WDSCI-L" <wdsci-l-bounces@xxxxxxxxxxxx>



Hi Darren

This depends on what "activity" means - we don't allow developers to change data on the production LPARs, so we don't have to record that kind of thing.

In a very simplistic way, I think of SOX as related to ensuring process
- how things are done.

We use Turnover change management app - it generates logs for each promotion/distribution to production - we convert these SPLFs to PDFs and store for auditing later.

If there are changes to file formats, say, those are logged by Turnover, and Turnover takes care of preserving the data.

So it seems to me that you don't need to go at some types of file changes
- you mention "actual file data" - I would think it rare that developers can even DO that.

HTH
Vern

On 10/20/2017 7:25 AM, Darren Strong wrote:
Thanks to SOX we're asked to develop a system to monitor activity by
developers on the production system (An IBM i). First, has anyone else
done something like this, and in an overview, how did you do it?

For my attempt, I'm summarizing file journal entries based on some
criteria, like user, and generating a summary report/spreadsheet with
a concatenated key. Then from that, I want to allow an auditor to
drill
into
that summary to get the detail of file changes. For now, I'm
copy/pasting
this "key" into another report program that is going to report change
by change, what happened in that file for that user, job, etc.

Anyway, I'm using the DISPLAY_JOURNAL SQL table function, and I have
this
huge and varying format ENTRY_DATA column. This is where the actual
file data is. I'd like to split this into the file's columns on the
spreadsheet, which I could do if it was all character data, but I'm
having
trouble figuring out how to split numerics of varying size and format
into
something in an RPG variable. If I use %subst to break a chunk of the
buffer out, what kind of field would I feed that into, because the
datatypes will vary so much?


___________________________________
Darren Strong
Dekko


--
This is the Rational Developer for IBM i / Websphere Development Studio Client for System i & iSeries (WDSCI-L) mailing list To post a message
email: WDSCI-L@xxxxxxxxxxxx To subscribe, unsubscribe, or change list options,
visit: https://lists.midrange.com/mailman/listinfo/wdsci-l
or email: WDSCI-L-request@xxxxxxxxxxxx
Before posting, please take a moment to review the archives at https://archive.midrange.com/wdsci-l.


--
This is the Rational Developer for IBM i / Websphere Development Studio Client for System i & iSeries (WDSCI-L) mailing list To post a message
email: WDSCI-L@xxxxxxxxxxxx To subscribe, unsubscribe, or change list options,
visit: https://lists.midrange.com/mailman/listinfo/wdsci-l
or email: WDSCI-L-request@xxxxxxxxxxxx
Before posting, please take a moment to review the archives at https://archive.midrange.com/wdsci-l.
CONFIDENTIALITY NOTICE: This electronic message transmission is intended only for the person or entity to which it is addressed and may contain information that is privileged, confidential or otherwise protected from disclosure. If you have received this transmission, but are not the intended recipient, you are hereby notified that any disclosure, copying, distribution or use of the contents of this information is strictly prohibited. If you have received this e-mail in error, please contact NALC Health Benefit Plan at 703-729-4677 and delete and destroy the original message and all copies.
--
This is the Rational Developer for IBM i / Websphere Development Studio Client for System i & iSeries (WDSCI-L) mailing list To post a message email: WDSCI-L@xxxxxxxxxxxx To subscribe, unsubscribe, or change list options,
visit: https://lists.midrange.com/mailman/listinfo/wdsci-l
or email: WDSCI-L-request@xxxxxxxxxxxx
Before posting, please take a moment to review the archives at https://archive.midrange.com/wdsci-l.


--
This is the Rational Developer for IBM i / Websphere Development Studio Client for System i & iSeries (WDSCI-L) mailing list To post a message email: WDSCI-L@xxxxxxxxxxxx To subscribe, unsubscribe, or change list options,
visit: https://lists.midrange.com/mailman/listinfo/wdsci-l
or email: WDSCI-L-request@xxxxxxxxxxxx
Before posting, please take a moment to review the archives at https://archive.midrange.com/wdsci-l.


As an Amazon Associate we earn from qualifying purchases.

This thread ...
Replies:
Follow On AppleNews
Return to Archive home page | Return to MIDRANGE.COM home page

This mailing list archive is Copyright 1997-2024 by midrange.com and David Gibbs as a compilation work. Use of the archive is restricted to research of a business or technical nature. Any other uses are prohibited. Full details are available on our policy page. If you have questions about this, please contact [javascript protected email address].

Operating expenses for this site are earned using the Amazon Associate program and Google Adsense.