Re: Spooled File audit journal entries

[ChadB@xxxxxxxxxxxxxxxxxxxx]

Excellent advice Rob!




                                                                       
             rob@xxxxxxxxx                                           
             Sent by:                                                  
             midrange-l-bounce                                          To
             s@xxxxxxxxxxxx            Midrange Systems Technical    
                                       Discussion                      
                                       <midrange-l@xxxxxxxxxxxx>     
             08/19/2008 04:00                                           cc
             PM                                                        
                                                                   Subject
                                       Re: Spooled File audit journal  
             Please respond to         entries                         
             Midrange Systems                                          
                 Technical                                             
                Discussion                                             
             <midrange-l@midra                                         
                 nge.com>                                            
                                                                       
                                                                       




Now, how hard would it have been to spool up a file, assign it to a writer
that's ended, wait a couple of minutes, and start the writer and see what
kind of journal entries are created?  Maybe spool file create, change
(assigned to a different output queue), printed?

Rob Berendt
--
Group Dekko Services, LLC
Dept 01.073
Dock 108
6928N 400E
Kendallville, IN 46755
http://www.dekko.com





ChadB@xxxxxxxxxxxxxxxxxxxx
Sent by: midrange-l-bounces@xxxxxxxxxxxx
08/19/2008 03:41 PM
Please respond to
Midrange Systems Technical Discussion <midrange-l@xxxxxxxxxxxx>


To
midrange-l@xxxxxxxxxxxx
cc

Subject
Spooled File audit journal entries








I have a question about some 'actions against spooled files' audit journal
entries (as below):

SF  A   QSPLJOB    Q04079N010 QSPL       QPRINT2     0001  WNAC02X
QUSRSYS    WNAC02X    QSPLJOB    599383 2008-08-18-17.41.02.
SF  A   QSPLJOB    Q04079N010 QSPL       QPRINT      0002  WNAC02X
QUSRSYS    WNAC02X    QSPLJOB    599383 2008-08-18-17.41.05.
SF  A   QSPLJOB    Q04079N010 QSPL       QSYSPRT     0003  WNAC02X
QUSRSYS    WNAC02X    QSPLJOB    599383 2008-08-18-17.41.05.



I can't find a specific entry type listed for when the spooled files
print.
The "A" entry type says that it was read by another users... are these
also
written when a spooled file is printed to a printer?  We suspect that's
when they printed (17:41ish) and would like to confirm it via the audit
journal entries...


--
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing
list
To post a message email: MIDRANGE-L@xxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxx
Before posting, please take a moment to review the archives
at http://archive.midrange.com/midrange-l.


--
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing list
To post a message email: MIDRANGE-L@xxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxx
Before posting, please take a moment to review the archives
at http://archive.midrange.com/midrange-l.


_____________________________________________________________________________

Scanned by IBM Email Security Management Services powered by MessageLabs.
For more information please visit http://www.ers.ibm.com
_____________________________________________________________________________