Restore History Logs and Audit Journal from tape backup

330 pts.
Tags:
iSeries
iSeries programming commands
1. How do you restore History logs and audit journals from tape full system backup (e.g. rstobj qsys/qhst* and rstobj qsys/quadjrn)?

2. Can this be stored in a temporary library without effects on the system?

3. How do you read the logs (history and audjrn)?

Thanks!

ASKED: April 8, 2010  11:17 PM
UPDATED: April 12, 2010  4:48 PM

Answer Wiki

Thanks. We'll let you know when a new response is added.

The QHST* files shouldn’t be much of a problem since they are named in relation to the Julian date and include a sequencing character. They can be restored to QSYS or to any user library. Viewing them, however, may be tricky if they’re not restored to QSYS. The DSPLOG command isn’t going to know anything about them unless they’re in QSYS.

As for QAUDJRN, it’s almost certain that you don’t want to restore the <i>journal.</i> Most likely you actually want to restore a particular range of <i>journal receivers</i>. These can be restored to any library, but it’s also best to restore them to the library you normally create them in. In order to access them, use the DSPJRN RCVRNG() parameter to list explicitly the first and last receiver that you will be searching.

You should restore receivers so that there are no gaps between the first receiver you list and the last one you list. You can have gaps between different groups that you restore and between any group that you restore and receivers that are live in the current receiver chain. You just don’t want to mess with trying to search across a group that has a receiver missing in the middle of your range.

Tom

Discuss This Question: 3  Replies

 
There was an error processing your information. Please try again later.
Thanks. We'll let you know when a new response is added.
Send me notifications when members answer or reply to this question.

REGISTER or login:

Forgot Password?
By submitting you agree to receive email from TechTarget and its partners. If you reside outside of the United States, you consent to having your personal data transferred to and processed in the United States. Privacy
  • Jedlasquite
    Need to search logs on a specific date for access and changes on a specific library
    330 pointsBadges:
    report
  • TomLiotta
    I wouldn't expect the QHST* files to have anything useful that is directly related to accessing or changing any common objects. They might be helpful in guiding review of what user profiles were associated with which jobs during a time span. Your QAUDJRN receivers should be the authoritative source, assuming object access/change auditing is enabled. For database data changes, the database journals would be more specific. For any journal, the DSPJRN command provides review of journal entries. Parameters provided to the command would vary depending on whether it was an audit or a database journal and on what particular kinds of activities would be sought. Tom
    125,585 pointsBadges:
    report
  • Jedlasquite
    Thank you Tom. This is very helpful.
    330 pointsBadges:
    report

Forgot Password

No problem! Submit your e-mail address below. We'll send you an e-mail containing your password.

Your password has been sent to:

To follow this tag...

There was an error processing your information. Please try again later.

REGISTER or login:

Forgot Password?
By submitting you agree to receive email from TechTarget and its partners. If you reside outside of the United States, you consent to having your personal data transferred to and processed in the United States. Privacy

Thanks! We'll email you when relevant content is added and updated.

Following