Viewing audit journal entries

Overview:
Purpose:
View QAUDJRN entries
How To:
DSPJRN (Display Journal command)
Authority:
*USE authority to QSYS/QAUDJRN *USE authority to journal receiver

The Display Journal (DSPJRN) command allows you to view selected journal entries at your workstation. To view journal entries, do the following actions:

  1. Type DSPJRN QAUDJRN and press F4. On the prompt display, you can enter information to select the range of entries that is shown. For example, you can select all entries in a specific range of dates, or you can select only a certain type of entry, such as an incorrect sign-on attempt (journal entry type PW).

    The default is to display entries from only the attached receiver. You can use RCVRNG(*CURCHAIN) to see entries from all receivers that are in the receiver chain for the QAUDJRN journal, up to and including the receiver that is currently attached.

  2. When you press the Enter key, you see the Display Journal Entries display:
                              Display Journal Entries
    
     Journal  . . . . . . :   QAUDJRN         Library  . . . . . . :   QSYS
     Largest sequence number on this screen  . . . . . :00000000000000000012
     Type options, press Enter.
       5=Display entire entry
    
    
     Opt    Sequence  Code  Type  Object      Library     Job       Time
                   1   J     PR                           SCPF      10:24:55
                   2   T     CA                           SCPF      10:24:55
                   3   T     CO                           SCPF      10:24:55
                   4   T     CA                           SCPF      10:24:55
                   5   T     CO                           SCPF      10:24:55
                   6   T     CA                           SCPF      10:24:55
                   7   T     CO                           SCPF      10:24:55
                   8   T     CA                           SCPF      10:24:56
                   9   T     CO                           SCPF      10:24:56
                  10   T     CA                           SCPF      10:24:57
                  11   T     CO                           SCPF      10:24:57
                  12   T     CA                           SCPF      10:24:57
                                                                     More...
     F3=Exit   F12=Cancel                          
  3. Use option 5 (Display entire entry) to see information about a specific entry:
                               Display Journal Entry
    
     Object . . . . . . . :                   Library  . . . . . . :          
     Member . . . . . . . :                                                   
     Incomplete data  . . :   No              Minimized entry data : *None    
     Sequence . . . . . . :   1198                                            
     Code . . . . . . . . :   T  - Audit trail entry                          
     Type . . . . . . . . :   CO - Create object                              
                                                                              
                 Entry specific data                                          
     Column      *...+....1....+....2....+....3....+....4....+....5           
     00001      'NISAVLDCK  QSYS      *PGM    CLE                  ' 
     00051      '                                                  ' 
     00101      '                                                  ' 
     00151      '                                                  ' 
     00201      '                                                  ' 
     00251      '                                                  ' 
     00301      '                                                  ' 
    
                                                                      More...
     Press Enter to continue.
    
     F3=Exit   F6=Display only entry specific data
     F10=Display only entry details    F12=Cancel    F24=More keys 
  4. You can use F6 (Display only entry specific data) for entries with a large amount of entry-specific data. You can also select a hexadecimal version of that display. You can use F10 to display details about the journal entry without any entry-specific information.

    Layout of audit journal entries contains the layout for each type of QAUDJRN journal entry.