Audit Journal ZC & ZR entry Access Specific Data

[adrotate group=”3,4,7″]
We have been adding new functionality to our High Availability product RAP when we came across the Access Specific Data for the ZC and ZR entries. Some testing showed that this entry contained additional data about the object the entry was for, in particular it contained the member name for any *FILE entries. The manuals had no information about the content or its layout and the header files in QSYSINC only show the layout for spool file and Image catalog entries. A quick email to the VIC support center eventually came back with the following information.

The data is in the following format
*XXXXX (object type)
Type of access:
What type of access the record is being sent for…add, remove… (Whether the data is for a ZC or ZR record)
Access Specific Data: The format of the data for the specified access type and record (ZR or ZC)

————————————————–
*ALRTBL

Type of access:
Add 1 (ZC record)
Remove 38 (ZC record)

Access Specific Data: Char 7 message id
————————-
*DEVD

Type of access:
Open 30 (ZC record)

Access Specific Data: char 10 api name QTACTLDV
————————-
*DTAARA
*DTAQ
*LIB

Type of access:
Apply 4 (ZC record)
Remove 38 (ZC record)

Access Specific Data: char 40 reserved
char 10 command name APYJRNCHG or RMVJRNCHG
———————-
*DTADCT

Type of access:
Change 7 (ZC record)

Access Specific Data: char 10 definition name
Type of access:
Create 14 (ZC record)

Access Specific Data: char 10 library name
char 1 ‘/’
char 10 file name

Type of access:
Delete 17 (ZC record)
Rename 39 (ZC record)

Access Specific Data: char 10 definition name (name and type of definition being renamed or deleted)
char 2 ‘ (‘
char 3 definition type
char 2 ‘) ‘
—————————–
*FILE

Type of access:
Add 1 (ZC record)
Change 7 (ZC record)
Check 8 (ZC record)
Clear 10 (ZC record)
Initialize 25 (ZC record)
Open 30 (ZC record ZR record)
Remove 38 (ZC record)
Reorganize 36 (ZC record)

Access Specific Data: Char 10 member name

Type of access:
Rename 39 (ZC record)

Access Specific Data: char 10 member name
char 10 old member name

Type of access:
Change 7 (ZC record)
Read 35 (ZR record)

Access Specific Data: char 10 member name
char 10 user name

Type of access:
Apply 4 (ZC record)
Remove 38 (ZC record)

Access Specific Data: char 10 member name
char 30 reserved
char 10 command name APYJRNCHG or RMVJRNCHG
————————
*FTR

Type of access:
Add 1 (ZC record)
Change 7 (ZC record)
Copy 13 (ZC record)
Remove 38 (ZC record)
Rename 39 (ZC record)

Access Specific Data: char 10 group name of action entry
or
Type of access:
Add 1 (ZC record)
Change 7 (ZC record)
Copy 13 (ZC record)
Move 28 (ZC record)
Remove 38 (ZC record)

Access Specific Data: char 10 sequence number
——————————-
*JOBSCD

Type of access:
Add 1 (ZC record)
Change 7 (ZC record)
Hold 24 (ZC record)
Release 37 (ZC record)
Remove 38 (ZC record)

Access Specific Data: char 10 entry name
char 6 entry number
———————–
*JRN

Type of access:
End Rollback 72 (ZC record)

Access Specific Data: char 13 ‘END ROLLBACK ‘
char 20 commit cycle id
———————–
*MSGF

Type of access:
Add 1 (ZC record)
Change 7 (ZC record)
Remove 38 (ZC record)

Access Specific Data: char 7 message id
————————-
*SCHIDX

Type of access:
Add 1 (ZC record)
Remove 38 (ZC record)

Access Specific Data: char 10 panel group name
——————–

Hope that helps others looking at the content of the audit journal entries.
Chris…