Suppress type ZR in AS/400 audit journaling

165 pts.
Tags:
AS 400
JRN
QAUDJRN
the size of our audit journal has exploded. In looking at the entries, we have a ton more of type ZR (object read access). Is there any way to suppress those from being captured in the audit journaling?


Software/Hardware used:
as400, v7r1
0

Answer Wiki

Thanks. We'll let you know when a new response is added.
Send me notifications when members answer or reply to this question.

Discuss This Question: 1  Reply

 
There was an error processing your information. Please try again later.
Thanks. We'll let you know when a new response is added.
Send me notifications when members answer or reply to this question.
  • TheRealRaven
    Review the 'ZR' entries to determine which objects are being audited. For each object, run the CHGOBJAUD command to set that object's audit attribute to something other than *ALL. Setting it to *CHANGE will also result in a ZR entry since objects must be read before they can be changed; however, simple reads of the object will no longer be logged.

    Various alternative actions could be done. The specific action will depend on how the object auditing was initially set up.

    Note that the object auditing attribute should not be changed if it's necessary to track access to audited objects. Instead, management of audit journal receivers should change in order to manage the greater size.
    36,025 pointsBadges:
    report

Forgot Password

No problem! Submit your e-mail address below. We'll send you an e-mail containing your password.

Your password has been sent to:

To follow this tag...

There was an error processing your information. Please try again later.

Thanks! We'll email you when relevant content is added and updated.

Following

Share this item with your network: