84 lines
5.2 KiB
HTML
84 lines
5.2 KiB
HTML
|
<?xml version="1.0" encoding="UTF-8"?>
|
||
|
|
<!DOCTYPE html
|
||
|
|
PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
|
||
|
|
<html lang="en-us" xml:lang="en-us">
|
||
|
|
<head>
|
||
|
|
<meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
|
||
|
|
<meta name="security" content="public" />
|
||
|
|
<meta name="Robots" content="index,follow" />
|
||
|
|
<meta http-equiv="PICS-Label" content='(PICS-1.1 "http://www.icra.org/ratingsv02.html" l gen true r (cz 1 lz 1 nz 1 oz 1 vz 1) "http://www.rsac.org/ratingsv01.html" l gen true r (n 0 s 0 v 0 l 0) "http://www.classify.org/safesurf/" l gen true r (SS~~000 1))' />
|
||
|
|
<meta name="DC.Type" content="concept" />
|
||
|
|
<meta name="DC.Title" content="Save and delete audit journal receivers" />
|
||
|
|
<meta name="abstract" content="This article describes how to save and delete audit journal receivers, explains why it is important, and provides step-by-step instructions." />
|
||
|
|
<meta name="description" content="This article describes how to save and delete audit journal receivers, explains why it is important, and provides step-by-step instructions." />
|
||
|
|
<meta name="DC.Relation" scheme="URI" content="rzamvmonitorsec.htm" />
|
||
|
|
<meta name="copyright" content="(C) Copyright IBM Corporation 2006" />
|
||
|
|
<meta name="DC.Rights.Owner" content="(C) Copyright IBM Corporation 2006" />
|
||
|
|
<meta name="DC.Format" content="XHTML" />
|
||
|
|
<meta name="DC.Identifier" content="savedeleteauditjournalreceivers" />
|
||
|
|
<meta name="DC.Language" content="en-us" />
|
||
|
|
<!-- All rights reserved. Licensed Materials Property of IBM -->
|
||
|
|
<!-- US Government Users Restricted Rights -->
|
||
|
|
<!-- Use, duplication or disclosure restricted by -->
|
||
|
|
<!-- GSA ADP Schedule Contract with IBM Corp. -->
|
||
|
|
<link rel="stylesheet" type="text/css" href="./ibmdita.css" />
|
||
|
|
<link rel="stylesheet" type="text/css" href="./ic.css" />
|
||
|
|
<title>Save and delete audit journal receivers</title>
|
||
|
|
</head>
|
||
|
|
<body id="savedeleteauditjournalreceivers"><a name="savedeleteauditjournalreceivers"><!-- --></a>
|
||
|
|
<!-- Java sync-link --><script language="Javascript" src="../rzahg/synch.js" type="text/javascript"></script>
|
||
|
|
<h1 class="topictitle1">Save and delete audit journal receivers</h1>
|
||
|
|
<div><p>This article describes how to save and delete audit journal receivers,
|
||
|
|
explains why it is important, and provides step-by-step instructions.</p>
|
||
|
|
<dl><dt class="dlterm">Purpose:</dt>
|
||
|
|
<dd>To attach a new audit journal receiver; to save and delete the old receiver </dd>
|
||
|
|
<dt class="dlterm">How to:</dt>
|
||
|
|
<dd><ul><li>CHGJRN QSYS/QAUDJRN</li>
|
||
|
|
<li>JRNRCV(*GEN) SAVOBJ (to save old receiver)</li>
|
||
|
|
<li>DLTJRNRCV (to delete old receiver)</li>
|
||
|
|
</ul>
|
||
|
|
</dd>
|
||
|
|
<dt class="dlterm">Authority:</dt>
|
||
|
|
<dd>*ALL authority to journal receiver; *USE authority to journal </dd>
|
||
|
|
</dl>
|
||
|
|
<div class="note"><span class="notetitle">Note:</span> Select a time when the system is not busy to save and delete
|
||
|
|
audit journal receivers.</div>
|
||
|
|
<div class="p">You should regularly detach the current audit journal receiver and attach
|
||
|
|
a new one for two reasons: <ul><li>Analyzing journal entries is easier if each journal receiver contains
|
||
|
|
the entries for a specific, manageable time period.</li>
|
||
|
|
<li>Large journal receivers can affect system performance, in addition to
|
||
|
|
taking valuable space on auxiliary storage.</li>
|
||
|
|
</ul>
|
||
|
|
</div>
|
||
|
|
<p>Having the system manage receivers automatically is the recommended approach.
|
||
|
|
You can specify this by using the <var class="varname">Manage receiver</var> parameter
|
||
|
|
when you create the journal. </p>
|
||
|
|
<p>If you have set up action auditing and object auditing to log many different
|
||
|
|
events, you may need to specify a large threshold value for the journal receiver.
|
||
|
|
If you are managing receivers manually, you may need to change journal receivers
|
||
|
|
daily. If you log only a few events, you may want to change receivers to correspond
|
||
|
|
with the backup schedule for the library containing the journal receiver. </p>
|
||
|
|
<p>You use the CHGJRN command to detach a receiver and attach a new receiver. </p>
|
||
|
|
<div class="p"><strong>System-Managed Journal Receivers:</strong> If you have the system manage
|
||
|
|
the receivers, use the following procedure to save all detached QAUDJRN receivers
|
||
|
|
and to delete them: <ol><li>Type <samp class="codeph">WRKJRNA QAUDJRN</samp>. The display shows you the currently
|
||
|
|
attached receiver. Do not save or delete this receiver.</li>
|
||
|
|
<li>Use F15 to work with the receiver directory. This shows all receivers
|
||
|
|
that have been associated with the journal and their status.</li>
|
||
|
|
<li>Use the SAVOBJ command to save each receiver, except the currently attached
|
||
|
|
receiver, which has not already been saved. </li>
|
||
|
|
<li>Use the DLTJRNRCV command to delete each receiver after it is saved.</li>
|
||
|
|
</ol>
|
||
|
|
<div class="note"><span class="notetitle">Note:</span> An alternative to the above procedure could be done
|
||
|
|
using the journal message queue and monitoring for the CPF7020 message which
|
||
|
|
indicates that the system change journal has completed successfully.</div>
|
||
|
|
</div>
|
||
|
|
<p>For additional information, refer to the section: <a href="../rzahg/rzahgbackup.htm">Backup and recovery</a>.</p>
|
||
|
|
</div>
|
||
|
|
<div>
|
||
|
|
<div class="familylinks">
|
||
|
|
<div class="parentlink"><strong>Parent topic:</strong> <a href="rzamvmonitorsec.htm" title="This set of topics discuss various techniques for monitoring and auditing security on your system.">Monitor security</a></div>
|
||
|
|
</div>
|
||
|
|
</div>
|
||
|
|
</body>
|
||
|
|
</html>
|