ibm-information-center/dist/eclipse/plugins/i5OS.ic.rzakz_5.4.0.1/rzakzqaudenacn.htm

121 lines
7.5 KiB
HTML

<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE html
PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html lang="en-us" xml:lang="en-us">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
<meta name="security" content="public" />
<meta name="Robots" content="index,follow" />
<meta http-equiv="PICS-Label" content='(PICS-1.1 "http://www.icra.org/ratingsv02.html" l gen true r (cz 1 lz 1 nz 1 oz 1 vz 1) "http://www.rsac.org/ratingsv01.html" l gen true r (n 0 s 0 v 0 l 0) "http://www.classify.org/safesurf/" l gen true r (SS~~000 1))' />
<meta name="DC.Type" content="concept" />
<meta name="DC.Title" content="Auditing system values: Audit journal error action" />
<meta name="abstract" content="Specifies the action for the system to take when audit records cannot be sent to the auditing journal because of errors that occur when the journal entry is sent. (QAUDENDACN)" />
<meta name="description" content="Specifies the action for the system to take when audit records cannot be sent to the auditing journal because of errors that occur when the journal entry is sent. (QAUDENDACN)" />
<meta name="DC.Relation" scheme="URI" content="rzakzauditingoverview.htm" />
<meta name="DC.Relation" scheme="URI" content="rzakzfinder.htm" />
<meta name="copyright" content="(C) Copyright IBM Corporation 1998, 2006" />
<meta name="DC.Rights.Owner" content="(C) Copyright IBM Corporation 1998, 2006" />
<meta name="DC.Format" content="XHTML" />
<meta name="DC.Identifier" content="rzakzqaudenacn" />
<meta name="DC.Language" content="en-us" />
<!-- All rights reserved. Licensed Materials Property of IBM -->
<!-- US Government Users Restricted Rights -->
<!-- Use, duplication or disclosure restricted by -->
<!-- GSA ADP Schedule Contract with IBM Corp. -->
<link rel="stylesheet" type="text/css" href="./ibmdita.css" />
<link rel="stylesheet" type="text/css" href="./ic.css" />
<title>Auditing system values: Audit journal error action</title>
</head>
<body id="rzakzqaudenacn"><a name="rzakzqaudenacn"><!-- --></a>
<!-- Java sync-link --><script language="Javascript" src="../rzahg/synch.js" type="text/javascript"></script>
<h1 class="topictitle1">Auditing system values: Audit journal error action</h1>
<div><p>Specifies the action for the system to take when audit records
cannot be sent to the auditing journal because of errors that occur when the
journal entry is sent. (QAUDENDACN)</p>
<p><span class="uicontrol">Audit journal error action</span>, also known as <span class="uicontrol">QAUDENDACN</span>,
is a member of the auditing category of i5/OS™ system values. You can use this system
value to specify the action to take if the system is unable to write audit
entries. The system takes the specified action when audit records are not
sent to the auditing journal because errors occur when the journal entry is
sent. To learn more, keep reading.</p>
<div class="tablenoborder"><table cellpadding="4" cellspacing="0" summary="" frame="border" border="1" rules="all"><thead align="left"><tr><th colspan="2" valign="top" id="d0e31">Quick reference</th>
</tr>
</thead>
<tbody><tr><td valign="top" headers="d0e31 "><strong>Location</strong></td>
<td valign="top" headers="d0e31 ">In iSeries™ Navigator,
select your system, <span class="menucascade"><span class="uicontrol"></span> &gt; <span class="uicontrol">Configuration
and Service</span> &gt; <span class="uicontrol">System Values</span> &gt; <span class="uicontrol">Auditing
System Values</span> &gt; <span class="uicontrol">Journaling</span></span></td>
</tr>
<tr><td valign="top" headers="d0e31 "><strong>Special authority</strong></td>
<td valign="top" headers="d0e31 ">Audit (*AUDIT) <sup><a href="#rzakzqaudenacn__qaudenacn1">1</a></sup></td>
</tr>
<tr><td valign="top" headers="d0e31 "><strong>Default value</strong></td>
<td valign="top" headers="d0e31 ">Notify, then continue</td>
</tr>
<tr><td valign="top" headers="d0e31 "><strong>Changes take effect</strong></td>
<td valign="top" headers="d0e31 ">Immediately</td>
</tr>
<tr><td valign="top" headers="d0e31 "><strong>Lockable</strong></td>
<td valign="top" headers="d0e31 ">Yes <a href="rzakzlocksecurity.htm"><br /><img src="rzakz503.gif" alt="Lockable system value" /><br /></a> (Click for details)</td>
</tr>
<tr><td colspan="2" valign="top" headers="d0e31 "><div class="note" id="rzakzqaudenacn__qaudenacn1"><a name="rzakzqaudenacn__qaudenacn1"><!-- --></a><span class="notetitle">Note 1:</span> To view this system value, you must have Audit (*AUDIT) or All
object (*ALLOBJ) special authority. To change this system value, you must
have Audit (*AUDIT) special authority.</div>
</td>
</tr>
</tbody>
</table>
</div>
<div class="section"><h4 class="sectiontitle">What can I do with this system value?</h4><p>Use this system
value to specify the action to take whenever auditing is active and the system
is not able to write entries to the audit journal.</p>
<p>If the security policy
for your system requires that no processing occur without auditing, then you
must set this value to <span class="uicontrol">Shut down the system</span> (*PWRDWNSYS).
For most systems, <span class="uicontrol">Notify, then continue</span> (*NOTIFY)
is the recommended value. This system value applies only to auditing entries
sent by the operating system to the security audit journal (QAUDJRN).</p>
<p>Possible
values are:</p>
<ul><li><span class="uicontrol">Notify, then continue (*NOTIFY)</span> <p>A message is
sent to the system operator's message queue once per hour until auditing is
successfully activated.</p>
</li>
<li><span class="uicontrol">Shut down the system (*PWRDWNSYS)</span> <p>The system
ends if the attempt to send the audit data to the security audit journal fails.
When the system is powered on again, the system is in the restricted state.
The <span class="uicontrol">Default auditing for newly created objects</span> (QCRTOBJAUD)
system value is set to <span class="uicontrol">None</span> to turn auditing off. On
the next restart, the user who signs on the system must have at least Audit
(*AUDIT) and All Object (*ALLOBJ) special authority.</p>
</li>
<li><span class="uicontrol">Not available (*NOTAVL)</span> <p>This value is displayed
if the user does not have authority to view the auditing value. You cannot
set the system value to not available (*NOTAVL). This value is only displayed
when a user accessing the system value does not have either All object (*ALLOBJ)
or Audit (*AUDIT) special authority.</p>
</li>
</ul>
<div class="note"><span class="notetitle">Note:</span> To view this auditing system value, you must have All object (*ALLOBJ)
or Audit (*AUDIT) special authority. If you do not have the required authority,
the Auditing category is not displayed in iSeries Navigator. In addition, if you
access this system value in the character-based interface, the not available
(*NOTAVL) value is displayed.</div>
</div>
<div class="section"><h4 class="sectiontitle">Where can I get more information about auditing system values?</h4><p>To
learn more, go to the auditing system values overview topic. If you are looking
for a specific system value or category of system values, try using the i5/OS system
value finder.</p>
</div>
</div>
<div><div class="relconcepts"><strong>Related concepts</strong><br />
<div><a href="rzakzauditingoverview.htm" title="Use i5/OS auditing system values to control a variety of auditing and other record-keeping events.">System values: Auditing overview</a></div>
</div>
<div class="relinfo"><strong>Related information</strong><br />
<div><a href="rzakzfinder.htm">System value finder</a></div>
</div>
</div>
</body>
</html>