AS/400 Log User Login/Logout Date and Time?

5 pts.
Tags:
AS/400
AS/400 audit
AS/400 login
Is it possible to see when AS400 users login and logoff? I find it unbelievable that you can see when a user changes/deletes/etc objects, but it doesn't show in the audit journal when a user simply logs on or off?!?!?

Software/Hardware used:
AS400

Answer Wiki

Thanks. We'll let you know when a new response is added.

See this thread: http://itknowledgeexchange.techtarget.com/itanswers/how-to-know-user-logged-in-or-not/

Discuss This Question: 6  Replies

 
There was an error processing your information. Please try again later.
Thanks. We'll let you know when a new response is added.
Send me notifications when members answer or reply to this question.

REGISTER or login:

Forgot Password?
By submitting you agree to receive email from TechTarget and its partners. If you reside outside of the United States, you consent to having your personal data transferred to and processed in the United States. Privacy
  • TomLiotta
    Is it possible to see when AS400 users login and logoff? Login/logoff to/from what? The *DATABASE server? The *FILE server? FTP? Telnet? (Passthru?) SMTP? Or one of the other servers? I find it unbelievable that you can see when a user changes/deletes/etc objects, but it doesn't show in the audit journal when a user simply logs on or off? That's most likely because either your system is configured not to audit or log it or you're looking for the wrong things. What exactly are you trying to find out? Tom
    125,585 pointsBadges:
    report
  • TomLiotta
    This thread -- http://itknowledgeexchange.techtarget.com/itanswers/how-to-know-user-logged-in-or-not/ -- does not address the question. It only addresses job starts and job ends. Most jobs start without involving a logon, and most jobs end without involving a logoff. Further, most logons do not cause a job to start, and most logoffs do not cause a job to end. Until it is known what the question is asking for, there is no good answer. If this involves auditing for compliance, for example, then the answer needs to be appropriate. Tom
    125,585 pointsBadges:
    report
  • Batman47
    Use the command DSPLOG along with the 'Jobs to display' parameter to list each of your display IDs and then list CPF1124 and CPF1164 for the 'Message identifier' to find out when the user logged in and then logged off. You can list several of your display IDs at once. This is a great tool, as we use this to find out who is not logging off the system properly. Users that stay signed on or do not exit the system properly will not have a corresponding 'ended' message to go along with the 'started' message.
    1,050 pointsBadges:
    report
  • TomLiotta
    ...change the data queue to look at QINTER rather than QBATCH, it will tell you the time, date, user profile, job name and job number each time the user signs on or off. No, it won't. It will tell you when jobs start or end in QINTER, but it won't tell you if they involved logons or logoffs. For example, you might start a group job without a logon and end a group job without a logoff. Or you might run a batch job in QINTER where no logon/logoff was even relevant. You might TFRJOB to QCTL or elsewhere and issue a logoff there -- it would be missed in QINTER. Or you might logon to QINTER, run CRTSBSD, set it up to handle your workstation, logoff and logon to start in your new subsystem -- all activity in the new subsystem would be missed, both logons and logoffs as if you hadn't been there at all. Or you might logon to QINTER as a basic user and call profile-switching APIs to "logon" as a high-power profile. There will be no job start involved. If you switch back, there will be job end even though you essentially "logged off" from the high-power profile. The point is that a job start is not equivalent to a logon no matter what subsystem is involved, and a job end is not necessarily equivalent to a logoff. If logons and logoffs are required to be tracked, the first step is to define what the terms mean. If that isn't done, you have clue what is actually being tracked. Tom
    125,585 pointsBadges:
    report
  • Rayj1031
    The JS journal entry does show logon and logoff but you have to turn on auditing and collect JS journal entries.
    335 pointsBadges:
    report
  • Brotherdh
    The Journal Entry VN shows Logon/Logoff information on the iSeries. But this CODE is not present in the Journal files. How do you turn this Journal option on????
    10 pointsBadges:
    report

Forgot Password

No problem! Submit your e-mail address below. We'll send you an e-mail containing your password.

Your password has been sent to:

To follow this tag...

There was an error processing your information. Please try again later.

REGISTER or login:

Forgot Password?
By submitting you agree to receive email from TechTarget and its partners. If you reside outside of the United States, you consent to having your personal data transferred to and processed in the United States. Privacy

Thanks! We'll email you when relevant content is added and updated.

Following