Audit end action

The QAUDENDACN system value allows you to set what action the system will take when audit records cannot be sent to the auditing journal because of errors that occur when the journal entry is sent.

Name in the character-based interface: QAUDENDACN
Name in the iSeries™ Navigator interface: audit journal error action
Description: This system value allows you to set what action the system will take when audit records cannot be sent to the auditing journal because of errors that occur when the journal entry is sent.
Recommended Values: For most installations, *NOTIFY is the recommended value. If your security policy requires that no processing be performed on the system without auditing, then you must select *PWRDWNSYS.
Only very unusual circumstances cause the system to be unable to write audit journal entries. However, if this does happen and the QAUDENDACN system value is *PWRDWNSYS, your system ends abnormally. This could cause a lengthy initial program load (IPL) when your system is powered on again.

Table 1. Possible values
Using QAUDENDACN system value
*NOTIFY	Message CPI2283 is sent to the QSYSOPR message queue and the QSYSMSG message queue (if it exists) every hour until auditing is successfully restarted. The system value QAUDCTL is set to *NONE to prevent the system from attempting to write additional audit journal entries. Processing on the system continues. If an IPL is performed before auditing is restarted, message CPI2284 is sent to the QSYSOPR and QSYSMSG message queues during the IPL.
*PWRDWNSYS	If the system is unable to write an audit journal entry, the system powers down immediately. The system unit displays system reference code (SRC) B900 3D10. When the system is powered on again, it is in a restricted state. This means the controlling subsystem is in a restricted state, no other subsystems are active, and sign-on is allowed only at the console. The QAUDCTL system value is set to NONE. The user who signs on the console to complete the IPL must have ALLOBJ and *AUDIT special authority.

Note: This system value is a restricted value. See Chapter 3: "Security System Values" in the Security Reference information for details on how to restrict changes to security system values and a complete list of the restricted system values. Also see the System Value Finder for more information.