Re: QSCWCHPS Generating a lot of JS-T Audit Journal Entries

[Rich Loeber <rich@xxxxxxxxx>]

Hmmm .... that's not very promising.

While researching the T-JS audit records, I saw that it was swapping 
over to QUSER, so I changed the application to run under QUSER.  When I 
restarted it, the T-JS records are still there showing a swap from QUSER 
to QUSER!

Grrrr.

Rich Loeber - @richloeber
Kisco Information Systems
http://www.kisco.com

------------------------------------------------------------------------



On 12/11/2020 1:23 PM, Justin Taylor wrote:
> I've struggled with that same issue.  I submitted an RFE, but it was
> declined by IBM because of the effort involved.  I had no choice but to
> abandon STRWCH and go DIY.
>
> date: Thu, 10 Dec 2020 14:56:15 -0500
> > from: Rich Loeber <rich@xxxxxxxxx>
> > subject: QSCWCHPS Generating a lot of JS-T Audit Journal Entries
> >
> > I have a customer that is seeing a ton of JS-T security audit journal
> > entries being generated for QSCWCHPS.? This is the Watch function
> > (STRWCH) running.? The type T entry is described as "Change profile or
> > group profile using profile token".
> >
> > Any insight in to how the volume of journals might be reduced while
> > still being able to use the STRWCH feature would be much appreciated.? I
> > don't see any information about this at the IBM Knowledge Center.
> >
> > Rich Loeber - @richloeber
> > Kisco Information Systems
> > http://www.kisco.com