|
Yes, there is. In fact this solution provides information for any command,
whose usage you want to monitor. If you turn on object auditing for the
SNDDST or any other command, the audit journal entry provides the command
string that the user entered. To turn on auditing for a command, run:
CHGOBJAUD OBJ(SNDDST) OBJTYPE(*CMD) OBJAUD(*ALL)
Then you'll have to make sure the object auditing is enabled for the system.
To do that, run:
DSPSYSVAL QAUDCTL - Make sure the value, *OBJAUD, is in the list. If not,
add it.
To display the audit journal entries, you can either use the Display Audit
Journal Entry (DSPAUDJRNE) command, looking for 'CD' entries, or a
third-party auditing package, such as PowerLock SecurityAudit. The Best Web Links: tips, tutorials and more.
|
