System Audit Journal Entries

["Graap, Ken" <keg@xxxxxxxxxxxxx>]

My system audit journal has been growing faster that anticipated since we
installed a data replication process that uses ODBC.

After a little investigation I found that the majority of our journal
entries were CODE=T  - Audit trail entry  TYPE=AP - Program adopt

These entries were being generated because out network security process exit
program, adopts authority to in order to process ODBC transaction requests.

I thought I knew exactly what to do. I modified the QAUDLVL system value and
removed the *PGMADP auditing option.

Well, the number of CODE=T/TYPE=AP entries dropped from hundreds per second,
to around 60 per second. 

What I can't figure out is why they weren't all elinited from my audit
journal.

Does anyone know what else, other than *PGMADP in system value QAUDLVL,
might force program adopt system audit journal entries to be generated?

Kenneth

****************************************
Kenneth E. Graap
IBM Certified Specialist 
AS/400e Professional System Administrator
NW Natural (Gas Services)
keg@xxxxxxxxxxxxx
Phone: 503-226-4211 x5537
FAX:    603-849-0591
****************************************