IBM Support

Audit Journal

News


Abstract

Audit journal support with IBM Navigator for i

Content

​You are in: IBM i Technology Updates  > Navigator for i  > Audit Journal
IBM Navigator for i now contains the ability to view information from audit journals and configure auditing settings. Note that the following release and PTF groups must be installed to view detailed information for the corresponding entry types. 
Release PTF Group Services Available
7.3 SF99703 Level 26 AF, CA, CD, CO, CP, DO, EV, GR, OW, PW, SV
7.4 SF99704 Level 15 AD, AF, CA, CD, CO, CP, DO, DS, EV, GR, JS, M0, M6, M7, M8, M9, OM, OW, PG, PW, SK, SM, ST, SV, ZC, ZR
7.5 N/A AD, AF, CA, CD, CO, CP, DO, DS, EV, GR, JS, M0, M6, M7, M8, M9, OM, OW, PG, PW, SK, SM, ST, SV, ZC, ZR
Under the security tab, click on Audit Journaling:
image-20220411143650-1
You will be prompted to choose between three views: daily chart view, weekly chart view, and detail view. By default daily chart view is selected. 

Configure view
image-20220411145914-1
The configure view dialog also allows you to choose what entry types and the date and time ranges you want to see data for. Depending on the view you select, you can also choose the graph color, sort, and auto refresh interval. Note that the more entries or longer time range you select, the longer the data will take to load. 

Daily chart
The daily chart view shows a graph of entry counts by entry type. Hover text on each bar displays the full entry name and count value. You can double click on a bar to go to the detail view for that entry type. 
image-20220411144750-2

Weekly view
Similarly, weekly view shows entry counts over the selected date range for each entry type. You can hover over each chart to refresh it and view the SQL command used to generate the chart. You can also double click on the chart to go to the detail view for that entry type. 
image-20220411145019-3

Detail view
Detail view pulls data from the audit journal entry services and displays it in a table. If you navigate to this view from the daily chart view or weekly chart view, you will see data for the date and time or date range that you selected respectively.
image-20220411145258-4

Breadcrumbs
The breadcrumbs allow you to navigate back to the chart view that you came from. Alternatively, you can click Configure view in the Action menu to reconfigure the options you selected. 
image-20220411145625-5
Audit configuration 
Under the action menu from from Security > Audit Journal, click Audit Configuration. 
image-20230209193958-1
The audit configuration view allows you to see what audit actions are enabled on the system and the entry types that are generated. You can enable or disable an auditing action by clicking on the switch in the enabled column. 
image-20230209194146-2
The System Value settings for Auditing are all handled in the Auditing Configuration. 
QAUDCTL setting:
image-20230928114043-1
Use Actions > Additional Audit System Values action to set for New Objects, Auditing End Action, and Auditing Force Level:
image-20230928114126-2
image-20230928114142-3
Turn on Auditing
If auditing is not configured on the system, a dialog will be displayed that walks you through the set up. When you click OK, the journal and journal receivers will be created and system values will be set appropriately. Note that the journal receivers and library (if created) will be owned by the logged in user. 
image-20230421140349-1
Note: the underlying audit journal receivers must be present for the selected date ranges to see data. You may also need the latest Db2 PTF groups to view detail data for each entry type. 

[{"Type":"MASTER","Line of Business":{"code":"LOB57","label":"Power"},"Business Unit":{"code":"BU058","label":"IBM Infrastructure w\/TPS"},"Product":{"code":"SWG60","label":"IBM i"},"ARM Category":[{"code":"a8m0z0000000CH1AAM","label":"IBM Navigator for i"}],"Platform":[{"code":"PF012","label":"IBM i"}],"Version":"7.3.0;7.4.0;and future releases"}]

Document Information

Modified date:
28 September 2023

UID

ibm16570755