[adrotate group=”3,4,7″]
We have been adding new functionality to our High Availability product RAP when we came across the Access Specific Data for the ZC and ZR entries. Some testing showed that this entry contained additional data about the object the entry was for, in particular it contained the member name for any *FILE entries. The manuals had no information about the content or its layout and the header files in QSYSINC only show the layout for spool file and Image catalog entries. A quick email to the VIC support center eventually came back with the following information.
The data is in the following format
*XXXXX (object type)
Type of access:
What type of access the record is being sent for…add, remove… (Whether the data is for a ZC or ZR record)
Access Specific Data: The format of the data for the specified access type and record (ZR or ZC)————————————————–
*ALRTBLType of access:
Add 1 (ZC record)
Remove 38 (ZC record)Access Specific Data: Char 7 message id
————————-
*DEVDType of access:
Open 30 (ZC record)Access Specific Data: char 10 api name QTACTLDV
————————-
*DTAARA
*DTAQ
*LIBType of access:
Apply 4 (ZC record)
Remove 38 (ZC record)Access Specific Data: char 40 reserved
char 10 command name APYJRNCHG or RMVJRNCHG
———————-
*DTADCTType of access:
Change 7 (ZC record)Access Specific Data: char 10 definition name
Type of access:
Create 14 (ZC record)Access Specific Data: char 10 library name
char 1 ‘/’
char 10 file nameType of access:
Delete 17 (ZC record)
Rename 39 (ZC record)Access Specific Data: char 10 definition name (name and type of definition being renamed or deleted)
char 2 ‘ (‘
char 3 definition type
char 2 ‘) ‘
—————————–
*FILEType of access:
Add 1 (ZC record)
Change 7 (ZC record)
Check 8 (ZC record)
Clear 10 (ZC record)
Initialize 25 (ZC record)
Open 30 (ZC record ZR record)
Remove 38 (ZC record)
Reorganize 36 (ZC record)Access Specific Data: Char 10 member name
Type of access:
Rename 39 (ZC record)Access Specific Data: char 10 member name
char 10 old member nameType of access:
Change 7 (ZC record)
Read 35 (ZR record)Access Specific Data: char 10 member name
char 10 user nameType of access:
Apply 4 (ZC record)
Remove 38 (ZC record)Access Specific Data: char 10 member name
char 30 reserved
char 10 command name APYJRNCHG or RMVJRNCHG
————————
*FTRType of access:
Add 1 (ZC record)
Change 7 (ZC record)
Copy 13 (ZC record)
Remove 38 (ZC record)
Rename 39 (ZC record)Access Specific Data: char 10 group name of action entry
or
Type of access:
Add 1 (ZC record)
Change 7 (ZC record)
Copy 13 (ZC record)
Move 28 (ZC record)
Remove 38 (ZC record)Access Specific Data: char 10 sequence number
——————————-
*JOBSCDType of access:
Add 1 (ZC record)
Change 7 (ZC record)
Hold 24 (ZC record)
Release 37 (ZC record)
Remove 38 (ZC record)Access Specific Data: char 10 entry name
char 6 entry number
———————–
*JRNType of access:
End Rollback 72 (ZC record)Access Specific Data: char 13 ‘END ROLLBACK ‘
char 20 commit cycle id
———————–
*MSGFType of access:
Add 1 (ZC record)
Change 7 (ZC record)
Remove 38 (ZC record)Access Specific Data: char 7 message id
————————-
*SCHIDXType of access:
Add 1 (ZC record)
Remove 38 (ZC record)Access Specific Data: char 10 panel group name
——————–
Hope that helps others looking at the content of the audit journal entries.
Chris…