delete hstry

1420 pts.
AS/400 Records
how to delete hstry of a job from log?

Answer Wiki

Thanks. We'll let you know when a new response is added.

This is something an auditor would definetely write you up for doing.

Discuss This Question: 10  Replies

There was an error processing your information. Please try again later.
Thanks. We'll let you know when a new response is added.
Send me notifications when members answer or reply to this question.
  • danmd5systemad
    Rajasekhar15, first of all, why do you want to delete the history of a job from the log? I think that this does not conform to I.T. best practices since history log serves as audit trail to check on previous job activities, now if you intend to remove it, what's your purpose? is it to hide something or remove evidence that something "fishy" was done? Please elaborate your position on the question you are raising in this forum.
    370 pointsBadges:
  • jinteik
    I total agree that people dont delete logs and this logs need to be kept if there is any security issue. Being an as400 admin the last thing you should do is to delete those logs
    18,995 pointsBadges:
  • TomLiotta
    Which "log" are you trying to modify? Note that you cannot clear the entries for a job from the system audit 'log' (the system audit journal) without deleting all receivers that received entries from or about the job. Records can be deleted from the history more or less just like any other physical file, but it can cause minor problems. And as others have noted, it should not be done. Tampering with system history can be serious. Tom
    125,585 pointsBadges:
  • TomLiotta
    Should have been "Records can be deleted from the history log more or less...". The system history log consists of the QHST message queue plus the files named QHSTxxxx in QSYS. Tom
    125,585 pointsBadges:
  • Rajasekhar15
    just asked, is there a way to do it, if so how can we do it,
    1,420 pointsBadges:
  • CharlieBrowne
    QHST is a PF so you can delete rtecords as you would with any other PF if you are authorized.
    62,385 pointsBadges:
  • Sloopy
    There is no QHST file. There are files called (for example) QHST11303A. As has been said, you may if you are sufficiently authorised delete records from such a file. Then you would probably have to reorganise the file, since any auditor could see that there were deleted records in it.
    2,195 pointsBadges:
  • WoodEngineer
    We have a couple of jobs that generate great quantities of Job xxx started and Job xxx ended. They served no purpose and really cluttered up our QHSTxxx files. Periodically we delete these messages. One thing we learned is to never delete the first or last record in the file. That seemed to break the chain from file to file. As long as we leave the first and last records in place, we can delete anything in between without problems. If you do not reorg the file after the delete, you can use one of the tools that retrieves deleted records in case your auditors pitch a fit.
    8,245 pointsBadges:
    Make sure you save them before you make any changes to them.
    3,175 pointsBadges:
  • The Most-Watched IT Questions: December 6, 2011 - ITKE Community Blog
    [...] 4. Rajasekhar15 wonders how to rewrite history by deleting log entries. [...]
    0 pointsBadges:

Forgot Password

No problem! Submit your e-mail address below. We'll send you an e-mail containing your password.

Your password has been sent to:

To follow this tag...

There was an error processing your information. Please try again later.

Thanks! We'll email you when relevant content is added and updated.


Share this item with your network: