747 lines
23 KiB
HTML
747 lines
23 KiB
HTML
|
|
<!doctype html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
|
|
<html>
|
|
<head><META http-equiv="Content-Type" content="text/html; charset=utf-8">
|
|
<title>Copy Audit Journal Entries (CPYAUDJRNE)</title>
|
|
<link rel="stylesheet" type="text/css" href="../rzahg/ic.css">
|
|
</head>
|
|
<body bgcolor="white">
|
|
<script language="Javascript" src="../rzahg/synch.js" type="text/javascript"></script>
|
|
<a name="CPYAUDJRNE.Top_Of_Page"></a>
|
|
<h2>Copy Audit Journal Entries (CPYAUDJRNE)</h2>
|
|
<table width="100%">
|
|
<tr>
|
|
<td valign="top" align="left"><b>Where allowed to run: </b>All environments (*ALL)<br>
|
|
<b>Threadsafe: </b>No
|
|
</td>
|
|
<td valign="top" align="right">
|
|
<a href="#CPYAUDJRNE.PARAMETERS.TABLE">Parameters</a><br>
|
|
<a href="#CPYAUDJRNE.COMMAND.EXAMPLES">Examples</a><br>
|
|
<a href="#CPYAUDJRNE.ERROR.MESSAGES">Error messages</a></td>
|
|
</tr>
|
|
</table>
|
|
|
|
<div> <a name="CPYAUDJRNE"></a>
|
|
<p>The Copy Audit Journal Entries (CPYAUDJRNE) command allows you to copy security audit records from the security auditing journal (QAUDJRN) into one or more outfiles. Each audit entry type selected is copied to a separate output file.
|
|
</p>
|
|
<p>To view the audit journal entries copied to the output file, you can use the Run Query (RUNQRY) command to display the records with column headings. The combination of CPYAUDJRNE followed by RUNQRY provides function that is similar to the Display Audit Journal Entries (DSPAUDJRNE) command but with the advantages that:
|
|
</p>
|
|
<ul>
|
|
<li>All journal entry types are supported.
|
|
</li>
|
|
<li>All audit journal entry fields are copied and available.
|
|
</li>
|
|
</ul>
|
|
<p>For information on all of the possible audit entries, see Chapter 9 of the Security Reference manual.
|
|
</p>
|
|
<p><b>Restrictions:</b>
|
|
</p>
|
|
<ol>
|
|
<li>You must have *AUDIT special authority to use this command.
|
|
</li>
|
|
<li>You must have *EXECUTE and *ADD authority to the specified library to create a new output file in that library.
|
|
</li>
|
|
<li>You must have *OBJOPR *OBJMGT *ADD *DLT authority to add or update a member in an existing output file.
|
|
</li>
|
|
</ol>
|
|
</div>
|
|
<table width="100%">
|
|
<tr><td align="right"><a href="#CPYAUDJRNE.Top_Of_Page">Top</a></td></tr>
|
|
</table>
|
|
<hr size="2" width="100%">
|
|
|
|
<div>
|
|
<h3><a name="CPYAUDJRNE.PARAMETERS.TABLE">Parameters</a></h3>
|
|
<table border="1" cellpadding="4" cellspacing="0">
|
|
<!-- col1="10" col2="15" col3="30" col4="10" -->
|
|
<tr>
|
|
<th bgcolor="aqua" valign="bottom" align="left">Keyword</th>
|
|
<th bgcolor="aqua" valign="bottom" align="left">Description</th>
|
|
<th bgcolor="aqua" valign="bottom" align="left">Choices</th>
|
|
<th bgcolor="aqua" valign="bottom" align="left">Notes</th>
|
|
</tr>
|
|
<tr>
|
|
<td valign="top"><a href="#CPYAUDJRNE.ENTTYP"><b>ENTTYP</b></a></td>
|
|
<td valign="top">Journal entry types</td>
|
|
<td valign="top">Single values: *ALL<br>Other values (up to 73 repetitions): AD, <b><u>AF</u></b>, AP, AU, CA, CD, CO, CP, CQ, CU, CV, CY, DI, DO, DS, EV, GR, GS, IM, IP, IS, JD, JS, KF, LD, ML, NA, ND, NE, OM, OR, OW, O1, O2, O3, PA, PG, PO, PS, PW, RA, RJ, RO, RP, RQ, RU, RZ, SD, SE, SF, SG, SK, SM, SO, ST, SV, VA, VC, VF, VL, VN, VO, VP, VR, VS, VU, VV, X0, X1, YC, YR, ZC, ZR</td>
|
|
<td valign="top">Optional, Positional 1</td>
|
|
</tr>
|
|
<tr>
|
|
<td valign="top" rowspan="3"><a href="#CPYAUDJRNE.OUTFILE"><b>OUTFILE</b></a></td>
|
|
<td valign="top">Output file prefix</td>
|
|
<td valign="top"><i>Qualified object name</i></td>
|
|
<td valign="top" rowspan="3">Optional</td>
|
|
</tr>
|
|
<tr>
|
|
<td valign="top">Qualifier 1: Output file prefix</td>
|
|
<td valign="top"><i>Name</i>, <b><u>QAUDIT</u></b></td>
|
|
</tr><tr>
|
|
<td valign="top">Qualifier 2: Library</td>
|
|
<td valign="top"><i>Name</i>, <b><u>QTEMP</u></b>, *CURLIB</td>
|
|
</tr><tr>
|
|
<td valign="top" rowspan="3"><a href="#CPYAUDJRNE.OUTMBR"><b>OUTMBR</b></a></td>
|
|
<td valign="top">Output member options</td>
|
|
<td valign="top"><i>Element list</i></td>
|
|
<td valign="top" rowspan="3">Optional</td>
|
|
</tr>
|
|
<tr>
|
|
<td valign="top">Element 1: Member to receive output</td>
|
|
<td valign="top">
|
|
<i>Name</i>, <b><u>*FIRST</u></b></td>
|
|
</tr>
|
|
<tr>
|
|
<td valign="top">Element 2: Replace or add records</td>
|
|
<td valign="top">
|
|
<b><u>*REPLACE</u></b>, *ADD</td>
|
|
</tr>
|
|
<tr>
|
|
<td valign="top"><a href="#CPYAUDJRNE.USRPRF"><b>USRPRF</b></a></td>
|
|
<td valign="top">User profile</td>
|
|
<td valign="top"><i>Name</i>, <b><u>*ALL</u></b></td>
|
|
<td valign="top">Optional</td>
|
|
</tr>
|
|
<tr>
|
|
<td valign="top" rowspan="7"><a href="#CPYAUDJRNE.JRNRCV"><b>JRNRCV</b></a></td>
|
|
<td valign="top">Journal receiver searched</td>
|
|
<td valign="top">Single values: <b><u>*CURRENT</u></b>, *CURCHAIN<br>Other values: <i>Element list</i></td>
|
|
<td valign="top" rowspan="7">Optional</td>
|
|
</tr>
|
|
<tr>
|
|
<td valign="top">Element 1: Starting journal receiver</td>
|
|
<td valign="top">
|
|
<i>Qualified object name</i></td>
|
|
</tr>
|
|
<tr>
|
|
<td valign="top" style="padding-left:10pt">Qualifier 1: Starting journal receiver</td>
|
|
<td valign="top"><i>Name</i></td>
|
|
</tr><tr>
|
|
<td valign="top" style="padding-left:10pt">Qualifier 2: Library</td>
|
|
<td valign="top"><i>Name</i>, <b><u>*LIBL</u></b>, *CURLIB</td>
|
|
</tr><tr>
|
|
<td valign="top">Element 2: Ending journal receiver</td>
|
|
<td valign="top">
|
|
Single values: <b><u>*CURRENT</u></b><br>Other values: <i>Qualified object name</i></td>
|
|
</tr>
|
|
<tr>
|
|
<td valign="top" style="padding-left:10pt">Qualifier 1: Ending journal receiver</td>
|
|
<td valign="top"><i>Name</i></td>
|
|
</tr><tr>
|
|
<td valign="top" style="padding-left:10pt">Qualifier 2: Library</td>
|
|
<td valign="top"><i>Name</i>, <b><u>*LIBL</u></b>, *CURLIB</td>
|
|
</tr><tr>
|
|
<td valign="top" rowspan="3"><a href="#CPYAUDJRNE.FROMTIME"><b>FROMTIME</b></a></td>
|
|
<td valign="top">Starting date and time</td>
|
|
<td valign="top">Single values: <b><u>*FIRST</u></b><br>Other values: <i>Element list</i></td>
|
|
<td valign="top" rowspan="3">Optional</td>
|
|
</tr>
|
|
<tr>
|
|
<td valign="top">Element 1: Starting date</td>
|
|
<td valign="top">
|
|
<i>Date</i></td>
|
|
</tr>
|
|
<tr>
|
|
<td valign="top">Element 2: Starting time</td>
|
|
<td valign="top">
|
|
<i>Time</i></td>
|
|
</tr>
|
|
<tr>
|
|
<td valign="top" rowspan="3"><a href="#CPYAUDJRNE.TOTIME"><b>TOTIME</b></a></td>
|
|
<td valign="top">Ending date and time</td>
|
|
<td valign="top">Single values: <b><u>*LAST</u></b><br>Other values: <i>Element list</i></td>
|
|
<td valign="top" rowspan="3">Optional</td>
|
|
</tr>
|
|
<tr>
|
|
<td valign="top">Element 1: Ending date</td>
|
|
<td valign="top">
|
|
<i>Date</i></td>
|
|
</tr>
|
|
<tr>
|
|
<td valign="top">Element 2: Ending time</td>
|
|
<td valign="top">
|
|
<i>Time</i></td>
|
|
</tr>
|
|
</table>
|
|
|
|
<table width="100%">
|
|
<tr><td align="right"><a href="#CPYAUDJRNE.Top_Of_Page">Top</a></td></tr>
|
|
</table>
|
|
</div>
|
|
<div> <a name="CPYAUDJRNE.ENTTYP"></a>
|
|
<h3>Journal entry types (ENTTYP)</h3>
|
|
<p>Specifies the journal entry types to be copied to an output file.
|
|
</p>
|
|
<p><b>Single value</b>
|
|
</p>
|
|
<dl>
|
|
<dt><b>*ALL</b></dt>
|
|
<dd>All audit record entry types are selected.
|
|
</dd>
|
|
</dl>
|
|
<p><b>Entry types (up to 73 repetitions)</b>
|
|
</p>
|
|
<dl>
|
|
<dt><b><u>AF</u></b></dt>
|
|
<dd>Authorization failure.
|
|
</dd>
|
|
<dt><b>AD</b></dt>
|
|
<dd>Auditing changes.
|
|
</dd>
|
|
<dt><b>AP</b></dt>
|
|
<dd>Obtaining adopted authority.
|
|
</dd>
|
|
<dt><b>AU</b></dt>
|
|
<dd>Attribute changes.
|
|
</dd>
|
|
<dt><b>CA</b></dt>
|
|
<dd>Change authority.
|
|
</dd>
|
|
<dt><b>CD</b></dt>
|
|
<dd>Command string.
|
|
</dd>
|
|
<dt><b>CO</b></dt>
|
|
<dd>Create object.
|
|
</dd>
|
|
<dt><b>CP</b></dt>
|
|
<dd>Change user profile.
|
|
</dd>
|
|
<dt><b>CQ</b></dt>
|
|
<dd>Change of *CRQD object.
|
|
</dd>
|
|
<dt><b>CU</b></dt>
|
|
<dd>Cluster management operations.
|
|
</dd>
|
|
<dt><b>CV</b></dt>
|
|
<dd>Connection verification.
|
|
</dd>
|
|
<dt><b>CY</b></dt>
|
|
<dd>Cryptographic configuration.
|
|
</dd>
|
|
<dt><b>DI</b></dt>
|
|
<dd>Directory services.
|
|
</dd>
|
|
<dt><b>DO</b></dt>
|
|
<dd>Delete object.
|
|
</dd>
|
|
<dt><b>DS</b></dt>
|
|
<dd>DST security password reset.
|
|
</dd>
|
|
<dt><b>EV</b></dt>
|
|
<dd>Environment variable operations.
|
|
</dd>
|
|
<dt><b>GR</b></dt>
|
|
<dd>Generic record.
|
|
</dd>
|
|
<dt><b>GS</b></dt>
|
|
<dd>Socket descriptor was given to another job.
|
|
</dd>
|
|
<dt><b>IM</b></dt>
|
|
<dd>Intrusion monitor.
|
|
</dd>
|
|
<dt><b>IP</b></dt>
|
|
<dd>Interprocess communication.
|
|
</dd>
|
|
<dt><b>IS</b></dt>
|
|
<dd>Internet security management.
|
|
</dd>
|
|
<dt><b>JD</b></dt>
|
|
<dd>Change to a user parameter of a job description.
|
|
</dd>
|
|
<dt><b>JS</b></dt>
|
|
<dd>Actions against jobs entries.
|
|
</dd>
|
|
<dt><b>KF</b></dt>
|
|
<dd>Key ring file.
|
|
</dd>
|
|
<dt><b>LD</b></dt>
|
|
<dd>Link, unlink, or lookup directory entry.
|
|
</dd>
|
|
<dt><b>ML</b></dt>
|
|
<dd>Office services mail actions.
|
|
</dd>
|
|
<dt><b>NA</b></dt>
|
|
<dd>Network attribute changed.
|
|
</dd>
|
|
<dt><b>ND</b></dt>
|
|
<dd>Directory search filter violations.
|
|
</dd>
|
|
<dt><b>NE</b></dt>
|
|
<dd>End point filter violations.
|
|
</dd>
|
|
<dt><b>OM</b></dt>
|
|
<dd>Object move or rename.
|
|
</dd>
|
|
<dt><b>OR</b></dt>
|
|
<dd>Object restored.
|
|
</dd>
|
|
<dt><b>OW</b></dt>
|
|
<dd>Object ownership changed.
|
|
</dd>
|
|
<dt><b>O1</b></dt>
|
|
<dd>(Optical access) single file or directory.
|
|
</dd>
|
|
<dt><b>O2</b></dt>
|
|
<dd>(Optical access) dual file or directory.
|
|
</dd>
|
|
<dt><b>O3</b></dt>
|
|
<dd>(Optical access) volume.
|
|
</dd>
|
|
<dt><b>PA</b></dt>
|
|
<dd>Program changed to adopt authority.
|
|
</dd>
|
|
<dt><b>PG</b></dt>
|
|
<dd>Change of an object's primary group.
|
|
</dd>
|
|
<dt><b>PO</b></dt>
|
|
<dd>Printed output entries.
|
|
</dd>
|
|
<dt><b>PS</b></dt>
|
|
<dd>Profile swap.
|
|
</dd>
|
|
<dt><b>PW</b></dt>
|
|
<dd>Invalid password entries.
|
|
</dd>
|
|
<dt><b>RA</b></dt>
|
|
<dd>Authority change during restore.
|
|
</dd>
|
|
<dt><b>RJ</b></dt>
|
|
<dd>Restoring job description with user profile specified.
|
|
</dd>
|
|
<dt><b>RO</b></dt>
|
|
<dd>Change of object owner during restore.
|
|
</dd>
|
|
<dt><b>RP</b></dt>
|
|
<dd>Restoring adopted authority program.
|
|
</dd>
|
|
<dt><b>RQ</b></dt>
|
|
<dd>Restoring a *CRQD object.
|
|
</dd>
|
|
<dt><b>RU</b></dt>
|
|
<dd>Restoring user profile authority.
|
|
</dd>
|
|
<dt><b>RZ</b></dt>
|
|
<dd>Changing a primary group during restore.
|
|
</dd>
|
|
<dt><b>SD</b></dt>
|
|
<dd>Changes to system distribution directory.
|
|
</dd>
|
|
<dt><b>SE</b></dt>
|
|
<dd>Subsystem routing entry changed.
|
|
</dd>
|
|
<dt><b>SF</b></dt>
|
|
<dd>Action on spooled files entries.
|
|
</dd>
|
|
<dt><b>SG</b></dt>
|
|
<dd>Asynchronous signals.
|
|
</dd>
|
|
<dt><b>SK</b></dt>
|
|
<dd>Secure sockets connections.
|
|
</dd>
|
|
<dt><b>SM</b></dt>
|
|
<dd>System management changes.
|
|
</dd>
|
|
<dt><b>SO</b></dt>
|
|
<dd>Server security user information actions.
|
|
</dd>
|
|
<dt><b>ST</b></dt>
|
|
<dd>Use of service tools.
|
|
</dd>
|
|
<dt><b>SV</b></dt>
|
|
<dd>System values changed entries.
|
|
</dd>
|
|
<dt><b>VA</b></dt>
|
|
<dd>Changing an access control list.
|
|
</dd>
|
|
<dt><b>VC</b></dt>
|
|
<dd>Starting or ending a connection.
|
|
</dd>
|
|
<dt><b>VF</b></dt>
|
|
<dd>Closing server files.
|
|
</dd>
|
|
<dt><b>VL</b></dt>
|
|
<dd>Account limit exceeded.
|
|
</dd>
|
|
<dt><b>VN</b></dt>
|
|
<dd>Logging on and off the network.
|
|
</dd>
|
|
<dt><b>VO</b></dt>
|
|
<dd>Validation list actions.
|
|
</dd>
|
|
<dt><b>VP</b></dt>
|
|
<dd>Network password error.
|
|
</dd>
|
|
<dt><b>VR</b></dt>
|
|
<dd>Network resource access.
|
|
</dd>
|
|
<dt><b>VS</b></dt>
|
|
<dd>Starting or ending a server session.
|
|
</dd>
|
|
<dt><b>VU</b></dt>
|
|
<dd>Changing a network profile.
|
|
</dd>
|
|
<dt><b>VV</b></dt>
|
|
<dd>Changing service status.
|
|
</dd>
|
|
<dt><b>X0</b></dt>
|
|
<dd>Network Authentication.
|
|
</dd>
|
|
<dt><b>X1</b></dt>
|
|
<dd>Identity token.
|
|
</dd>
|
|
<dt><b>YC</b></dt>
|
|
<dd>DLO object changed entries.
|
|
</dd>
|
|
<dt><b>YR</b></dt>
|
|
<dd>DLO object read entries.
|
|
</dd>
|
|
<dt><b>ZC</b></dt>
|
|
<dd>Object changed entries.
|
|
</dd>
|
|
<dt><b>ZR</b></dt>
|
|
<dd>Object read entries.
|
|
</dd>
|
|
</dl>
|
|
</div>
|
|
<table width="100%">
|
|
<tr><td align="right"><a href="#CPYAUDJRNE.Top_Of_Page">Top</a></td></tr>
|
|
</table>
|
|
<div> <a name="CPYAUDJRNE.OUTFILE"></a>
|
|
<h3>Output file prefix (OUTFILE)</h3>
|
|
<p>Specifies the prefix for each database file to which the output of the command is directed. If an output file does not exist, this command creates the file in the specified library. If an output file is created by this command, the public authority for the file is set to *EXCLUDE.
|
|
</p>
|
|
<p><b>Qualifier 1: Output file prefix</b>
|
|
</p>
|
|
<dl>
|
|
<dt><b><u>QAUDIT</u></b></dt>
|
|
<dd>Each output database file name will begin with 'QAUDIT' with the audit entry type appended to form the complete file name. For example, QAUDITZR would be the file name if ENTTYP(ZR) was specified.
|
|
</dd>
|
|
<dt><b><i>name prefix</i></b></dt>
|
|
<dd>Specify the first 1 to 8 characters of the name of each database file to which the audit entries will be copied. The audit entry type will be appended to the name prefix to form the complete database file name. For example, if FEB2004 is specified as the name prefix and ENTTYP(AF) is specified, the database file name used is FEB2004AF.
|
|
</dd>
|
|
</dl>
|
|
<p><b>Qualifier 2: Library</b>
|
|
</p>
|
|
<dl>
|
|
<dt><b><u>QTEMP</u></b></dt>
|
|
<dd>The QTEMP library for the job is used to locate the file.
|
|
</dd>
|
|
<dt><b>*CURLIB</b></dt>
|
|
<dd>The current library for the thread is used to locate the file. If no library is specified as the current library for the thread, the QGPL library is used.
|
|
</dd>
|
|
</dl>
|
|
<dl>
|
|
<dt><b><i>name</i></b></dt>
|
|
<dd>Specify the name of the library to be searched.
|
|
</dd>
|
|
</dl>
|
|
</div>
|
|
<table width="100%">
|
|
<tr><td align="right"><a href="#CPYAUDJRNE.Top_Of_Page">Top</a></td></tr>
|
|
</table>
|
|
<div> <a name="CPYAUDJRNE.OUTMBR"></a>
|
|
<h3>Output member options (OUTMBR)</h3>
|
|
<p>Specifies the name of the database file member that receives the output of the command.
|
|
</p>
|
|
<p><b>Element 1: Member to receive output</b>
|
|
</p>
|
|
<dl>
|
|
<dt><b><u>*FIRST</u></b></dt>
|
|
<dd>The first member in the file receives the output. If OUTMBR(*FIRST) is specified and the file has no members, the system creates a member with the name of the file generated from the <b>Output file prefix (OUTFILE)</b> and <b>Journal entry types (ENTTYP)</b> parameters. If the member already exists, you have the option to add new records to the end of the existing member or clear the member and then add the new records.
|
|
</dd>
|
|
</dl>
|
|
<dl>
|
|
<dt><b><i>name</i></b></dt>
|
|
<dd>Specify the name of the file member that receives the output. If it does not exist, the system creates it.
|
|
</dd>
|
|
</dl>
|
|
<p><b>Element 2: Replace or add records</b>
|
|
</p>
|
|
<dl>
|
|
<dt><b><u>*REPLACE</u></b></dt>
|
|
<dd>The system clears the existing member and adds the new records.
|
|
</dd>
|
|
</dl>
|
|
<dl>
|
|
<dt><b>*ADD</b></dt>
|
|
<dd>The system adds the new records to the end of the existing records.
|
|
</dd>
|
|
</dl>
|
|
</div>
|
|
<table width="100%">
|
|
<tr><td align="right"><a href="#CPYAUDJRNE.Top_Of_Page">Top</a></td></tr>
|
|
</table>
|
|
<div> <a name="CPYAUDJRNE.USRPRF"></a>
|
|
<h3>User profile (USRPRF)</h3>
|
|
<p>Specifies which user profile's journal entries are to be included in the output files.
|
|
</p>
|
|
<dl>
|
|
<dt><b><u>*ALL</u></b></dt>
|
|
<dd>The output files will include entries for all user profiles.
|
|
</dd>
|
|
<dt><b><i>name</i></b></dt>
|
|
<dd>Specify the name of the user profile whose journal entries are to be copied to the output files.
|
|
</dd>
|
|
</dl>
|
|
</div>
|
|
<table width="100%">
|
|
<tr><td align="right"><a href="#CPYAUDJRNE.Top_Of_Page">Top</a></td></tr>
|
|
</table>
|
|
<div> <a name="CPYAUDJRNE.JRNRCV"></a>
|
|
<h3>Journal receiver searched (JRNRCV)</h3>
|
|
<p>Specifies the starting (first) and ending (last) journal receivers whose journal entries are searched.
|
|
</p>
|
|
<p>
|
|
<b>Note: </b>If the maximum number of receivers (256) in the range is surpassed, an error occurs and no journal entries are copied.
|
|
</p>
|
|
<p><b>Single values</b>
|
|
</p>
|
|
<dl>
|
|
<dt><b><u>*CURRENT</u></b></dt>
|
|
<dd>Journal entries in the currently attached journal receiver are searched.
|
|
</dd>
|
|
<dt><b>*CURCHAIN</b></dt>
|
|
<dd>Journal entries in the currently attached journal receiver chain are searched. If there is a break in the chain, the receiver range is from the most recent break in the chain through the receiver that is attached when starting to convert journal entries.
|
|
</dd>
|
|
</dl>
|
|
<p><b>Element 1: Starting journal receiver</b>
|
|
</p>
|
|
<dl>
|
|
<dt><b></b></dt>
|
|
<dd>
|
|
<p><b>Qualifier 1: Starting journal receiver</b>
|
|
</p>
|
|
<dl>
|
|
<dt><b><i>name</i></b></dt>
|
|
<dd>Specify the name of the first journal receiver from which entries are searched.
|
|
</dd>
|
|
</dl>
|
|
</dd>
|
|
<dt><b></b></dt>
|
|
<dd>
|
|
<p><b>Qualifier 2: Library</b>
|
|
</p>
|
|
<dl>
|
|
<dt><b><u>*LIBL</u></b></dt>
|
|
<dd>The library list is used to locate the journal receiver.
|
|
</dd>
|
|
<dt><b>*CURLIB</b></dt>
|
|
<dd>The current library for the job is used to locate the journal receiver. If no library is specified as the current library for the job, QGPL is used.
|
|
</dd>
|
|
<dt><b><i>name</i></b></dt>
|
|
<dd>Specify the name of the library where the journal receiver is located.
|
|
</dd>
|
|
</dl>
|
|
</dd>
|
|
</dl>
|
|
<p><b>Element 2: Ending journal receiver</b>
|
|
</p>
|
|
<p><b>Single values</b>
|
|
</p>
|
|
<dl>
|
|
<dt><b><u>*CURRENT</u></b></dt>
|
|
<dd>The journal receiver that is currently attached is used as the ending journal receiver.
|
|
</dd>
|
|
</dl>
|
|
<dl>
|
|
<dt><b></b></dt>
|
|
<dd>
|
|
<p><b>Qualifier 1: Ending journal receiver</b>
|
|
</p>
|
|
<dl>
|
|
<dt><b><i>name</i></b></dt>
|
|
<dd>Specify the name of the last journal receiver from which entries are searched.
|
|
</dd>
|
|
</dl>
|
|
</dd>
|
|
<dt><b></b></dt>
|
|
<dd>
|
|
<p><b>Qualifier 2: Library</b>
|
|
</p>
|
|
<dl>
|
|
<dt><b><u>*LIBL</u></b></dt>
|
|
<dd>The library list is used to locate the journal receiver.
|
|
</dd>
|
|
<dt><b>*CURLIB</b></dt>
|
|
<dd>The current library for the job is used to locate the journal receiver. If no library is specified as the current library for the job, QGPL is used.
|
|
</dd>
|
|
<dt><b><i>name</i></b></dt>
|
|
<dd>Specify the name of the library where the journal receiver is located.
|
|
</dd>
|
|
</dl>
|
|
</dd>
|
|
</dl>
|
|
</div>
|
|
<table width="100%">
|
|
<tr><td align="right"><a href="#CPYAUDJRNE.Top_Of_Page">Top</a></td></tr>
|
|
</table>
|
|
<div> <a name="CPYAUDJRNE.FROMTIME"></a>
|
|
<h3>Starting date and time (FROMTIME)</h3>
|
|
<p>Specifies the date and time of the first journal entry to be searched.
|
|
</p>
|
|
<p><b>Single values</b>
|
|
</p>
|
|
<dl>
|
|
<dt><b><u>*FIRST</u></b></dt>
|
|
<dd>The search is to begin with the first record in the journal receiver.
|
|
</dd>
|
|
</dl>
|
|
<p><b>Element 1: Starting date</b>
|
|
</p>
|
|
<dl>
|
|
<dt><b><i>date</i></b></dt>
|
|
<dd>Specify the starting date. The starting date and time of the first journal entry occurring at or after the specified starting date and time becomes the starting point for the range of entries to be searched.
|
|
</dd>
|
|
</dl>
|
|
<p><b>Element 2: Starting time</b>
|
|
</p>
|
|
<dl>
|
|
<dt><b><i>time</i></b></dt>
|
|
<dd>Specify the starting time. The starting date and time of the first journal entry occurring at or after the specified starting date and time becomes the starting point for the range of entries to be searched.
|
|
<p>The time can be specified with or without a time separator:
|
|
</p>
|
|
<ul>
|
|
<li>Without a time separator, specify a string of 4 or 6 digits (hhmm or hhmmss) where hh = hours, mm = minutes, and ss = seconds.
|
|
</li>
|
|
<li>With a time separator, specify a string of 5 or 8 digits where the time separator specified for your job is used to separate the hours, minutes, and seconds. If you enter this command from the command line, the string must be enclosed in apostrophes. If a time separator other than the separator specified for your job is used, this command will fail.
|
|
</li>
|
|
</ul>
|
|
</dd>
|
|
</dl>
|
|
</div>
|
|
<table width="100%">
|
|
<tr><td align="right"><a href="#CPYAUDJRNE.Top_Of_Page">Top</a></td></tr>
|
|
</table>
|
|
<div> <a name="CPYAUDJRNE.TOTIME"></a>
|
|
<h3>Ending date and time (TOTIME)</h3>
|
|
<p>Specifies the creation date and time of the last journal entry to be searched.
|
|
</p>
|
|
<p><b>Single values</b>
|
|
</p>
|
|
<dl>
|
|
<dt><b><u>*LAST</u></b></dt>
|
|
<dd>The search is to end with the last record in the journal receiver.
|
|
</dd>
|
|
</dl>
|
|
<p><b>Element 1: Ending date</b>
|
|
</p>
|
|
<dl>
|
|
<dt><b><i>date</i></b></dt>
|
|
<dd>Specify the ending date. The ending date and time of the first journal entry occurring at or before the specified ending time on the specified ending date becomes the ending point for the range of entries to be searched.
|
|
</dd>
|
|
</dl>
|
|
<p><b>Element 2: Ending time</b>
|
|
</p>
|
|
<dl>
|
|
<dt><b><i>time</i></b></dt>
|
|
<dd>Specify the ending time. The ending date and time of the first journal entry occurring at or before the specified ending time on the specified ending date becomes the ending point for the range of entries to be searched.
|
|
<p>The time can be specified with or without a time separator:
|
|
</p>
|
|
<ul>
|
|
<li>Without a time separator, specify a string of 4 or 6 digits (hhmm or hhmmss) where hh = hours, mm = minutes, and ss = seconds.
|
|
</li>
|
|
<li>With a time separator, specify a string of 5 or 8 digits where the time separator specified for your job is used to separate the hours, minutes, and seconds. If you enter this command from the command line, the string must be enclosed in apostrophes. If a time separator other than the separator specified for your job is used, this command will fail.
|
|
</li>
|
|
</ul>
|
|
</dd>
|
|
</dl>
|
|
</div>
|
|
<table width="100%">
|
|
<tr><td align="right"><a href="#CPYAUDJRNE.Top_Of_Page">Top</a></td></tr>
|
|
</table>
|
|
<hr size="2" width="100%">
|
|
<div><h3><a name="CPYAUDJRNE.COMMAND.EXAMPLES">Examples</a> </h3>
|
|
<p><b>Example 1: Copy Authority Failure (AF) Records</b>
|
|
</p>
|
|
<p>
|
|
<pre>
|
|
CPYAUDJRNE ENTTYP(AF)
|
|
</pre>
|
|
</p>
|
|
<p>This command copies all 'Authority Failure' audit records in the current journal receiver and puts them in member QAUDITAF in database file QTEMP/QAUDITAF.
|
|
</p>
|
|
<p>The copied audit records can be displayed by a RUNQRY command, such as:
|
|
</p>
|
|
<p>
|
|
<pre>
|
|
RUNQRY QRY(*NONE) QRYFILE((QTEMP/QAUDITAF))
|
|
</pre>
|
|
</p>
|
|
<p><b>Example 2: Copy Two Entry Types</b>
|
|
</p>
|
|
<p>
|
|
<pre>
|
|
CPYAUDJRNE ENTTYP(CO DO) OUTFILE(AUDITLIB/SYSTEM1)
|
|
</pre>
|
|
</p>
|
|
<p>This command copies all 'Create Object' and 'Delete Object' audit records in the current journal receiver and puts them in database files AUDITLIB/SYSTEM1CO and AUDITLIB/SYSTEM1DO respectively.
|
|
</p>
|
|
<p>The copied audit records can be displayed by RUNQRY commands, such as:
|
|
</p>
|
|
<p>
|
|
<pre>
|
|
RUNQRY QRY(*NONE) QRYFILE((AUDITLIB/SYSTEM1CO))
|
|
OUTTYPE(*DISPLAY) OUTFORM(*RUNOPT)
|
|
</pre>
|
|
</p>
|
|
<p>
|
|
<pre>
|
|
RUNQRY QRY(*NONE) QRYFILE((AUDITLIB/SYSTEM1DO))
|
|
OUTTYPE(*DISPLAY) OUTFORM(*RUNOPT)
|
|
</pre>
|
|
</p>
|
|
<p><b>Example 3: Copy All Entry Types</b>
|
|
</p>
|
|
<p>
|
|
<pre>
|
|
CPYAUDJRNE ENTTYP(*ALL) OUTFILE(SAVEAUDIT/JUNE)
|
|
OUTMBR(SMITHJ *REPLACE) USRPRF(SMITHJ)
|
|
JRNRCV(*CURCHAIN)
|
|
FROMTIME('06/01/2004' '00:00:00')
|
|
TOTIME('07/01/2004' '00:00:00')
|
|
</pre>
|
|
</p>
|
|
<p>This command copies all audit entries for user profile SMITHJ to a set of database files in library SAVEAUDIT that have names like JUNExx where the xx is the audit record entry type. The search for audit records will be performed for all journal receivers in the current chain of journal receivers. Only audit records that were written between midnight on June 01, 2004 and midnight on July 01, 2004 will be copied.
|
|
</p>
|
|
<p>
|
|
<b>Note: </b>This command may run for a very long time. The entire chain of journal receivers will be searched repeatedly for each audit record entry type.
|
|
</p>
|
|
</div>
|
|
<table width="100%">
|
|
<tr><td align="right"><a href="#CPYAUDJRNE.Top_Of_Page">Top</a></td></tr>
|
|
</table>
|
|
<hr size="2" width="100%">
|
|
<div><h3><a name="CPYAUDJRNE.ERROR.MESSAGES">Error messages</a> </h3>
|
|
<p><b><u>*ESCAPE Messages</u></b>
|
|
</p>
|
|
<dl>
|
|
<dt><b>CPFB303</b></dt>
|
|
<dd>Cannot access data from QAUDJRN.
|
|
</dd>
|
|
<dt><b>CPFB304</b></dt>
|
|
<dd>User does not have required special authorities.
|
|
</dd>
|
|
<dt><b>CPFB30A</b></dt>
|
|
<dd>Record format name &2 does not match expected name &1.
|
|
</dd>
|
|
<dt><b>CPF4AA4</b></dt>
|
|
<dd>No records copied for some ENTTYP values.
|
|
</dd>
|
|
<dt><b>CPF9801</b></dt>
|
|
<dd>Object &2 in library &3 not found.
|
|
</dd>
|
|
<dt><b>CPF9802</b></dt>
|
|
<dd>Not authorized to object &2 in &3.
|
|
</dd>
|
|
<dt><b>CPF9810</b></dt>
|
|
<dd>Library &1 not found.
|
|
</dd>
|
|
<dt><b>CPF9820</b></dt>
|
|
<dd>Not authorized to use library &1.
|
|
</dd>
|
|
</dl>
|
|
</div>
|
|
<table width="100%">
|
|
<tr><td align="right"><a href="#CPYAUDJRNE.Top_Of_Page">Top</a></td></tr>
|
|
</table>
|
|
</body>
|
|
</html>
|