We have an OUTQ which got deleted yesterday, however we tried checking thru DSPJRNE and other means as LOGs, however it doesn't show up. The only thing which comes in the log is when the writer has ended. The obj deletion is not coming up.
Software/Hardware used:
ASKED:
February 15, 2013 3:27 PM
UPDATED:
February 15, 2013 4:02 PM
If DSPJRN doesn’t show a T/DO entry for the *OUTQ, then object deletions were not being audited at the time it was deleted or you need to look in earlier receivers in the receiver chain. — Tom
Or… DSPAUDJRNE ENTTYP(DO) OUTPUT(*)
DSPAUDJRNE can be used for general browsing and simple research. However, it should not be used for serious audit research. According to Using Object Auditing to Track Use of Print-Related Commands, “…the DSPAUDJRNE command is not supported…”. And MustGather: Security Issues and other IBM docs explicitly warn against relying on DSPAUDJRNE over DSPJRN for QAUDJRN. — Tom