Yes, assuming that you have your system configured to track such things.
These commands can obviously be put into a CL program and many parameter changes are possible. This sequence does the task from the QCMD command entry screen. Go into QCMD and press F11=Display full, to get more entry lines. Then copy/paste the commands and press Enter after each one:<pre>
CRTDUPOBJ OBJ( QASYSMJ5 )
FROMLIB( QSYS )
TOLIB( QTEMP )
NEWOBJ( JSM )
DSPJRN JRN( QAUDJRN )
RCVRNG (*CURCHAIN )
FROMTIME( 080910 1400 )
JRNCDE(( T ))
ENTTYP( SM )
OUTPUT( *OUTFILE )
OUTFILFMT( *TYPE5 )
OUTFILE( QTEMP/JSM )
RUNQRY QRYFILE(( QTEMP/JSM ))</pre>
Those commands did these actions:<ul>
<li>Copy a model file from QSYS. The model we chose is for "SM" entries -- System Management. It is a format for *TYPE5 journal extractions. Put the copy in QTEMP and give it an name such as JSM.</li><li>Get audit journal entries into our temporary file. Get the entries from the current chain of receivers. Limit the entries to a date range. (Date range is optional, use it if you know what the range is.) Select only audit entries -- code "T". Select only system management entries -- type "SM". Put the entries into an outfile named QTEMP/JSM. Use the *TYPE5 output format.</li><li>Now run a query over the entries.</li>
You may run the DSPJRN command by itself and use OUTPUT(*) to get a list of the entries on your display screen. That's useful when you are familiar with audit journal entries and when you think that there will be relatively few of them.
If you are sure that a reply list change was done and if no SM entries appear, the journal receivers are not on the system or the selected date range was wrong or you aren't auditing these actions and you won't be able to track it down.
Last Wiki Answer Submitted: August 9, 2010 10:08 pm by TomLiotta108,215 pts.
All Answer Wiki Contributors: TomLiotta108,215 pts.