CHKAUDLOGP CHECK AUDLOGP TAASEKM |
The Check AUDLOGP command checks audit entries for valid changes to
the AUDLOG TAA Tool AUDLOGP file. CHKAUDLOGP helps ensure that the
AUDLOGP file is a true representation of the QAUDJRN journal. You
must be using the QAUDJRN journal and have set auditing for the
AUDLOGP file.
You must have *ALLOBJ authority to use CHKAUDLOGP.
You must have at least *OBJAUD specified for the QAUDCTL system
value.
You must have specified auditing of the AUDLOGP file with:
CHGOBJAUD OBJ(xxx/AUDLOGP) OBJTYPE(*FILE)
OBJAUD(*CHANGE)
If you are going to test the use of a command that would be
considered an exception, enter a CHGPF command without changing any
values such as:
CHGPF FILE(AUDLOGP)
The CHGPF command should cause a journal entry that should be found
by CHKAUDLOGP. The CVTAUDLOG command is the normal command provided
to convert entries to the AUDLOGP file.
A typical CHKAUDLOGP file would be:
CHKAUDLOGP
A listing would be output of all journal code = T (audit type) and
the entry types of:
ZC = Change
AD = CHGOBJAUD
Any changes that were not made by :
CVTAUDLOG
CVTAUDLOG3
MTNAUDLOG
would be flagged. The program that made the change would be noted.
However, if the change was made using a system command, the program
that is higher in the stack is noted. For example, if the change was
made from the QCMD entry display, QCMD is listed as the program that
made the change.
The actual command that was issued will be listed if the user who has
entered a change is being audited for commands via the CHGUSRAUD
function.
CHKAUDLOGP escape messages you can monitor for
----------------------------------------------
None. Escape messages from based on functions will be re-sent.
CHKAUDLOGP Command parameters *CMD
-----------------------------
STRDATE The start date to be used when converting journal
entries. *BEGIN is the default meaning the first
journal entry found in the chain of QAUDJRN journal
receivers. A specific date in job format may be
entered.
ENDDATE The end date to be used when converting journal
entries. *END is the default meaning the last
journal entry found in the chain of QAUDJRN journal
receivers. A specific date in job format may be
entered.
AUDLOGLIB The library where the AUDLOGP file exists. *LIBL is
the default.
OUTPUT How to output the results. * is the default to
display the spooled file if the command is entered
interactively. If the display is ended with F3/F12
or the Enter key, the spooled file is deleted after
it is displayed. To retain the spooled file, you
may use the the System Request 'Cancel' function and
the spooled file will exist in a HLD status.
If the command is entered in batch or *PRINT is
specified, the spooled file is output and retained.
Restrictions
------------
You must have *ALLOBJ authority to use CHKAUDLOGP.
Prerequisites
-------------
The following TAA Tools must be on your system:
CHKALLOBJ Check *ALLOBJ special authority
CVTDAT Convert date
RTVSYSVAL3 Retrieve system value 3
SCNVAR Scan variable
SNDCOMPMSG Send completion message
SNDESCINF Send escape information
SNDESCMSG Send escape message
SNDSTSMSG Send status message
Implementation
--------------
None, the tool is ready to use.
Objects used by the tool
------------------------
Object Type Attribute Src member Src file
------ ---- --------- ---------- ----------
CHKAUDLOGP *CMD TAASEKM QATTCMD
TAASEKMC *PGM CLP TAASEKMC QATTCL
TAASEKMR *PGM RPG TAASEKMR QATTRPG
|
Added to TAA Productivity tools January 15, 2012