RE: Audit journal create object entries question

["Gary Monnier" <gmonnier@xxxxxxxxxxxxxxxx>]

Loyd,

You does seem an odd circumstance.  Can you recreate the issue at will?

Anything unusual in the journal for job 684259/SHERMAN/QPADEV000P?

Anything from other jobs that might seem related within a few seconds one
way or the other of 11/07/2008 at 14:35:57? Is it possible a Change Control
process was replacing the commands when they were prompted for example?

- Gary



-----Original Message-----

date: Wed, 10 Dec 2008 13:22:49 -0500
from: <lgoodbar@xxxxxxxxxxxxxx>
subject: RE: Audit journal create object entries question

I don't see any indication CHGCMD was used.

November's report had two objects in this scenario: PROD_MOD/DBARPT2 and
PROD_MOD/IMPLOOKUP. Both are *CMD objects. Both are OPM CL menu driver
programs: WVCPROD and WVCPLNR. Both are prompted commands in the
respective CL source.

0036.00              ?dbarpt2
030827

0145.00              ? implookup
010219

Both show an "Entry type" of R (Replaced). Here is the journal entry
information, slightly reformatted.

                             Display Journal Entry

 Object . . . . . . . :                   Library  . . . . . . :
 Member . . . . . . . :
 Incomplete data  . . :   No              Minimized entry data :   *NONE
 Sequence . . . . . . :   14841658
 Code . . . . . . . . :   T  - Audit trail entry
 Type . . . . . . . . :   CO - Create object

             Entry specific data
 Column      *...+....1....+....2....+....3....+....4....+....5
 00001      'RDBARPT2   PROD_MOD  *CMD                         '
 00051      '                                                  '
 00101      '                                                  '
 00151      '                                                  '
 00201      '                                                  '
 00251      '                                                  '
 00301      '                                                  '
 00351      '                                                  '
 00401      '                                                  '
 00451      '                                                  '
 00501      '                                                  '
 00551      '                                                  '
 00601      '                                                  '
 00651      '                                                  '
 00701      '                                            *SYSBA'
 00751      'S   00000'
 
Bottom

                         Display Journal Entry Details

 Journal  . . . . . . :   QAUDJRN         Library  . . . . . . :   QSYS

 Sequence . . . . . . :   14841658
 Code . . . . . . . . :   T  - Audit trail entry
 Type . . . . . . . . :   CO - Create object

 Object . . . . . . . :
   Type . . . . . . . :
 Date . . . . . . . . :   11/07/08
 Time . . . . . . . . :   14:35:57
 Flag . . . . . . . . :   0
 Count/RRN  . . . . . :   0
 Commit cycle ID  . . :   0
 Nested commit level  :   0
 Job  . . . . . . . . :   684259/SHERMAN/QPADEV000P
 User profile . . . . :   SHERMAN
 Ignore APY/RMV . . . :   No
 Ref constraint . . . :   No
 Trigger  . . . . . . :   No
 Program  . . . . . . :   WVCPROD
   Library  . . . . . :     PROD_MOD
   ASP device . . . . :     *SYSBAS
 System sequence  . . :   10367727908187889664
 Thread identifier  . :   0000000000000060
 Receiver . . . . . . :   AUDRCV4438
   Library  . . . . . :     QGPL
   ASP device . . . . :     *SYSBAS
 Journal identifier . :   X'00000000000000000000'
 Remote address . . . :   10.121.22.12
 Address family . . . :   IPv4
 Remote port  . . . . :   49635
 System name  . . . . :   WVAS400
 Arm number . . . . . :   3
 Logical unit of work :   *OMITTED
 Transaction ID . . . :   *OMITTED
 
Bottom

                       Display Object Description - Full
                                                                 Library
1 of 1
 Object . . . . . . . :   DBARPT2         Attribute  . . . . . :
   Library  . . . . . :     PROD_MOD      Owner  . . . . . . . :
LGOODBAR
 Library ASP device . :   *SYSBAS         Library ASP group  . :
*SYSBAS
 Type . . . . . . . . :   *CMD            Primary group  . . . :   *NONE

 User-defined information:
   Attribute  . . . . . . . . . . . . . :
   Text . . . . . . . . . . . . . . . . :   Cycle counting accuracy
report

 Creation information:
   Creation date/time . . . . . . . . . :   08/27/03  12:57:53
   Created by user  . . . . . . . . . . :   GOODBAR
   System created on  . . . . . . . . . :   WVAS400
   Object domain  . . . . . . . . . . . :   *SYSTEM
 Change/Usage information:
   Change date/time . . . . . . . . . . :   11/07/08  14:35:57
   Usage data collected . . . . . . . . :   YES
   Last used date . . . . . . . . . . . :   04/16/07
   Days used count  . . . . . . . . . . :   132
     Reset date . . . . . . . . . . . . :
   Allow change by program  . . . . . . :   YES
 Auditing/Integrity information:
   Object auditing value  . . . . . . . :   *NONE
   Digitally signed . . . . . . . . . . :   NO
 Storage information:
   Size . . . . . . . . . . . . . . . . :   8192
   Offline size . . . . . . . . . . . . :   8192
   Associated space size  . . . . . . . :   4096
   Optimum space alignment  . . . . . . :   YES
   Freed  . . . . . . . . . . . . . . . :   NO
   Compressed . . . . . . . . . . . . . :   INELIGIBLE
   Object ASP number  . . . . . . . . . :   1
     Object overflowed  . . . . . . . . :   NO
   Object ASP device  . . . . . . . . . :   *SYSBAS
   Object ASP group . . . . . . . . . . :   *SYSBAS
 Journaling information:
   Currently journaled  . . . . . . . . :   NO
 Save/Restore information:
   Save date/time . . . . . . . . . . . :   12/10/08  03:10:39
   Restore date/time  . . . . . . . . . :   03/27/04  22:15:04
   Save command . . . . . . . . . . . . :   SAVLIB
   Device type  . . . . . . . . . . . . :   Tape
   Sequence number  . . . . . . . . . . :   5
   Volumes  . . . . . . . . . . . . . . :   AS0024
   File label ID  . . . . . . . . . . . :   PROD_MOD
   Save format  . . . . . . . . . . . . :   Serial
 
Bottom


I could be wrong, but still believe it has to do with prompting.

--Loyd