GR (Generic Record) journal entries

This table provides the format of the GR (Generic Record) journal entries.

Start of changeInformation from this audit journal entry can be queried with the SYSTOOLS.AUDIT_JOURNAL_GR table function: AUDIT_JOURNAL_GREnd of change

Table 1. GR (Generic Record) journal entries. QASYGRJ4/J5 Field Description File
Offset Field Format Description
JE J4 J5
  1 1     Heading fields common to all entry types. See Standard heading fields for audit journal entries QJORDJE5 Record Format (*TYPE5) and Standard heading fields for audit journal entries QJORDJE4 Record Format (*TYPE4) for field listing.
  224 610 Entry Type Char(1) The type of entry.
A
Exit program added
C
Operations Resource Monitoring and Control Operations
D
Exit program removed
F
Function registration operations
Start of changeOEnd of change
Start of changeObjectConnect operationsEnd of change
R
Exit program replaced
  225 611 Action Char(2) The action performed.
ZC
Change
ZR
Read
Start of changeFor entry type O, the possible values are:
SV
Save
RS
Restore
End of change
  227 613 User Name Char(10) User profile name

For entry type F, this field contains the name of the user the function registration operation was performed against.

Start of changeFor entry type O, this field contains the name of the user performing the ObjectConnect operation.End of change
  237 623 Field 1 CCSID Binary (5) The CCSID value for field 1.
  241 627 Field 1 Length Binary (4) The length of the data in field 1.
  243 629 Field 1 Char(102)1 Field 1 data

For entry type F, this field contains the description of the function registration operation that was performed. The possible values are:

*REGISTER:
Function has been registered
*REREGISTER:
Function has been updated
*DEREGISTER:
Function has been de-registered
*CHGUSAGE:
Function usage information has been changed
*CHKUSAGE:
Function usage was checked for a user and the check passed
*USAGEFAILURE:
Function usage was checked for a user and the check failed
For entry types A, D, and R, this field will contain the exit program information for the specific function that was performed.
For entry type C, this field contains the name of the RMC function that is being attempted. The possible values are:
  • mc_reg_event_select Register event using attribute selection
  • mc_reg_event_handle Register event using resource handle
  • mc_reg_class_event Register event for a resource class
  • mc_unreg_event Unregister event
  • mc_define_resource Define new resource
  • mc_undefine_resource Undefine resource
  • mc_set_select Set resource attribute values using attribute selection
  • mc_set_handle Set resource attribute values using resource handle
  • mc_class_set Set resource class attribute values
  • mc_query_p_select Query resource persistent attributes using attribute selection
  • mc_query_d_select Query resource dynamic attributes using attribute selection
         
  • mc_query_p_handle Query resource persistent attributes using resource handle
  • mc_query_d_handle Query resource dynamic attributes using resource handle
  • mc_class_query_p Query resource class persistent attributes
  • mc_class_query_d Query resource class dynamic attributes
  • mc_qdef_resource_class Query resource class definition
  • mc_qdef_p_attribute Query persistent attribute definition
  • mc_qdef_d_attribute Query dynamic attribute definition
  • mc_qdef_sd Query Structured Data definition
  • mc_qdef_valid_values Query definition of a persistent attribute's valid values
  • mc_qdef_actions Query definition of a resource's actions
  • mc_invoke_action Invoke action on a resource
  • mc_invoke_class_action Invoke action on a resource class

Start of changeFor entry type O, this field contains the ObjectConnect CL command. The possible values are:End of change

Start of change
SAVRST
Save/Restore Integrated File System
SAVRSTCFG
Save/Restore Configuration
SAVRSTCHG
Save/Restore Changed Object
SAVRSTDLO
Save/Restore Document Library Object
SAVRSTLIB
Save/Restore Library
SAVRSTOBJ
Save/Restore Object
End of change
  345 731 Field 2 CCSID Binary (5) The CCSID value for field 2.
  349 735 Field 2 Length Binary (4) The length of the data in field 2.
  351 737 Field 2 Char (102)1 Field 2 data

For entry type F, this field contains the name of the function that was operated on.

For entry type C, this field contains the name of the resource or resource class against which the operation was attempted.

Start of changeFor entry type O and Action RS (J5 offset 611), this field contains the name of the system on which the objects are saved.End of change

Start of changeFor entry type O and Action SV (J5 offset 611), this field contains the name of the system on which the objects are restored.End of change
  453 839 Field 3 CCSID Binary (5) The CCSID value for field 3.
  457 843 Field 3 Length Binary (4) The length of the data in field 3.
  459 845 Field 3 Char(102)1 Field 3 data.

For entry type F, this field contains the usage setting for a user. There is a value for this field only if the function registration operation is one of the following values:

*REGISTER:
When the operation is *REGISTER, this field contains the default usage value. The user name will be *DEFAULT.
*REREGISTER:
When the operation is *REREGISTER, this field contains the default usage value. The user name will be *DEFAULT.
*CHGUSAGE:
When the operation is *CHGUSAGE, this field contains the usage value for the user specified in the user name field.
For entry type C, this field contains the result of any authorization check that was made for the operation indicated in field 1. The following are possible values:
  • *NOAUTHORITYCHECKED: When either the operation indicated in field 1 does not require an authorization check, or if for any other reason an authorization check was not attempted.
  • *AUTHORITYPASSED: When the mapped user ID indicated in the User Profile Name has successfully passed the appropriate authorization check for the operation indicated in field 1 against the resource or resource class indicated in field 2.
  • *AUTHORITYFAILED: When the mapped user ID indicated in the User Profile Name has failed the appropriate authorization check for the operation indicated in field 1 against the resource or resource class indicated in field 2.
         
Start of changeFor entry type O and Commands (J5 offset 629) SAVRST, SAVRSTCHG, SAVRSTLIB, and SAVRSTOBJ, this field contains two pieces of information used for the save. The information is in the following order:
  • Char(10) Library.

    The library name is set when processing objects from the QSYS file system otherwise it is blank. It is the name of the saved library or the library from which the objects were saved.

  • Char(10) ASP device or ASP number.
    The value may be blank or one of the following:
    • name
    • *
    • *ALLAVL
    • *CURASPGRP
    • *SYSBAS
    • *ANY
    • 1-32
End of change
  561 947 Field 4 CCSID Binary (5) The CCSID value for field 4.
  565 951 Field 4 Length Binary (4) The length of the data in field 4.
  567 953 Field 4 Char(102)1 Field 4 data.

For entry type F (J5 offset 610), there is a value for this field only if the function registration operation is one of the following values:

*CHGUSAGE
When the operation is *CHGUSAGE, this field contains the previous usage value for a user.
*REGISTER
When the operation is *REGISTER, this field contains the allow *ALLOBJ setting for the function.
*REREGISTER
When the operation is *REREGISTER, this field contains the allow *ALLOBJ setting for the function.
Start of changeFor entry type O and Commands (J5 offset 629) SAVRST, SAVRSTCHG, SAVRSTLIB, and SAVRSTOBJ, this field contains three pieces of information used for the restore. The information is in following order:
  • Char(10) Library name.

    The library name is set when processing objects from the QSYS file system otherwise it is blank. It is the name of the restored library or the library to which the objects were restored.

  • Char(10) ASP device.
    The ASP device is one of the following or blank if ASP number is set:
    • name
    • *SAVASPDEV
  • Char(10) ASP number.
    The ASP number is one of the following or blank if ASP device is set:
    • 1-32
    • *SAVASP
End of change
    1055 Field 5 CCSID Binary (5) The CCSID value for field 5.
    1059 Field 5 Length Binary (4) The length of the data in field 5.
    1061 Field 5 Char(102)1 Field 5 data.

For entry type F (J5 offset 610), this field contains the previous default usage value. There is a value for this field only if the function registration operation (J5 offset 629) is *REREGISTER. The user name (J5 offset 613) will be *DEFAULT.

Start of changeFor entry type O, this field contains the UUID of the ObjectConnect operation.End of change
    1163 Field 6 CCSID Binary (5) The CCSID value for field 6.
    1167 Field 6 Length Binary (4) The length of the data in field 6.
    1169 Field 6 Char(102)1 Field 6 data.

For entry type F (J5 offset 610), this field contains the previous allow *ALLOBJ setting for the function. There is a value for this field only if the function registration operation (J5 offset 629) is *REREGISTER.

Start of changeFor entry type O and Action SV (J5 offset 611), this field contains the name of the user under which the restore will be performed. The possible values are:
  • name
  • *NONE
  • *CURRENT
  • *KERBEROS
End of change
1
This is a variable length field. The first two bytes contain the length of the field.