1. On a command line, type WRKJRNA, press < F4> . Enter QAUDJRN for the Journal and leave *LIBL for the library. Your screen should like the screen shown below:
================================================================================
Type choices, press Enter.
Journal . . . . . . . . . . . . > QAUDJRN Name, *INTSYSJRN Library . . . . . . . . . . . *LIBL Name, *LIBL, *CURLIB Output . . . . . . . . . . . . . * *, *PRINT
Bottom
F3=Exit F4=Prompt F5=Refresh F12=Cancel F13=How to use this display
F24=More keys
================================================================================
PressAfter you press enter you should see a screen similar to the one shown below. Please make note of the information on your screen that corresponds with the information in bold type in the screen shown below.
================================================================================
Work with Journal Attributes
Journal . . . . . . : QAUDJRN1 Library . . . . . . : QSYS2
Auxiliary storage Receiver size options: *NONE
pool . . . . . . . : 1
Message queue . . . : QSYSOPR
Library . . . . . : *LIBL
Manage receivers . . : *USER
Delete receivers . . : *NO
Text . . . . . . . . : Security Journal Receiver
Type options, press Enter.
8=Display attributes
Attached
Option Receiver Library
ZAUDJR01153 QGPL4
Bottom
F3=Exit F12=Cancel F13=Display journaled files
F14=Display journaled access paths F15=Work with receiver directory
================================================================================
1 = Journal Name
2 = Library journal resides in
3 = Currently attached journal receiver
4 = Library attached journal receiver resides in
After you have made note of all of the necessary information press <F3> to exit the Work with Journal Attributes screen.
1. On a command line, type CRTJRNRCV press < F4> . The journal receiver needs to be at least one number larger than the one noted above in Step 1. For example, if ZAUDJR0115 is attached, use ZAUDJR0116 here. The library needs to match the library for the journal receiver shown above (QGPL for example), Auxiliary storage pool ID is *LIBASP, Journal receiver threshold is variable (I suggest 1919999). Text should be 'Audit Journal Receiver'. Below is an example of what the screen should look like before you press <Enter>
================================================================================
Type choices, press Enter.
Journal receiver . . . . . . . . ZAUDJR0116 Name
Library . . . . . . . . . . . QGPL Name, *CURLIB
Auxiliary storage pool ID . . . *LIBASP 1-16, *LIBASP
Journal receiver threshold . . . 1919999 1-1919999, *NONE
Text 'description' . . . . . . . 'Audit Journal Receiver'
Bottom
F3=Exit F4=Prompt F5=Refresh F10=Additional parameters F12=Cancel
F13=How to use this display F24=More keys
================================================================================
After you have verified the information is correct. Press <Enter>. This will create a new journal receiver on your system.
2. On a command line, type CHGJRN, press < F4>. The journal to be changed is QAUDJRN and library is QSYS (unless otherwise displayed in Step 1). Press < Enter> .
The returned screen should be filled in as noted below. The Journal receiver number used is the one you created in Step 2 above. Also, make sure that the Manage receivers option is specified as *SYSTEM
================================================================================
Type choices, press Enter.
Journal . . . . . . . . . . . . > QAUDJRN Name
Library . . . . . . . . . . . > QSYS Name, *LIBL, *CURLIB
Journal receiver:
Journal receiver . . . . . . . ZAUDJR0116 Name, *SAME, *GEN
Library . . . . . . . . . . QGPL Name, *LIBL, *CURLIB
Journal receiver . . . . . . . Name, *GEN
Library . . . . . . . . . . Name, *LIBL, *CURLIB
Sequence option . . . . . . . . *CONT *RESET, *CONT
Journal threshold msgq . . . . . QSYSOPR Name, *SAME
Library . . . . . . . . . . . *LIBL Name, *LIBL, *CURLIB
Manage receivers . . . . . . . . *SYSTEM *SAME, *USER, *SYSTEM
Delete receivers . . . . . . . . *NO *SAME, *NO, *YES
Receiver size options . . . . . *SAME *SAME, *NONE, *RMVINTENT...
Text 'description' . . . . . . . 'Security Journal Receiver'
Bottom
F3=Exit F4=Prompt F5=Refresh F12=Cancel F13=How to use this display
F24=More keys
================================================================================
After you have made all of the changes shown above, press < Enter>. This will attach your newly created receiver, and tell the operating system to start managing the journal receivers.
Use the WRKJRNA command as in step 1 and press F15 from the screen where the attached journal number is displayed. This will show all associated receivers and you may choose to delete them as appropriate for your operation.
See also Basic security Journal Receiver Management for information on maintaining the journal receiver files themselves.