I entered a bad password for 5250 SST, and that got logged.  I entered a bad password for LAN console*, and nothing got logged.
* - iACS, 5250 Console, Service tools user
-----Original Message-----
From: Rob Berendt [mailto:rob@xxxxxxxxx] 
Sent: Tuesday, May 02, 2017 7:19 AM
To: Midrange Systems Technical Discussion <midrange-l@xxxxxxxxxxxx>
Subject: RE: How SST user was disabled?
I found "Display Journal Entry" while looking at the journals.  Namely QAUDJRN.
DSPJRN JRN(QAUDJRN) RCVRNG(*CURCHAIN) FROMTIME(050117 1300) ENTTYP(PW)
Sequence  Code  Type    Job         Time         Col 1 
39044148   T     PW     ROBS1       13:49:56     Y 
39045103   T     PW     ROBS1       13:51:00     Z 
39045104   T     PW     ROBS1       13:51:02     Z 
39045171   T     PW     ROBS1       13:51:05     X 
I took out two empty columns in the middle and added the right column.
You can see details in there such as
Job  . . . . . . . . :   179042/ROB/ROBS1
User profile . . . . :   ROB 
Remote address . . . :   10.10.8.237
And anything else you need to string the fellow up.
Rob Berendt
--
IBM Certified System Administrator - IBM i 6.1 Group Dekko Dept 1600 Mail to:  2505 Dekko Drive
          Garrett, IN 46738
Ship to:  Dock 108
          6928N 400E
          Kendallville, IN 46755
http://www.dekko.com
As an Amazon Associate we earn from qualifying purchases.