Not sure how you checked history log and audit journals, so you may have
already tried these:
This has more to do with "when" - to find the strprtwtr (
CPF3382 is message for STRPRTWTR (there is a CHGWTR cmd i never used, but
may need to include CPX3359, CPX3360, CPX3361)
DSPLOG LOG(QHST) MSGID(CPF3382) for the date range - this will show all
the STRPRTWTR executions or CPF3390 for the endwtr executions. to narrow
down when the writer started (or ended and then started again.
Display History Log Contents
Writer 870007/QSPLJOB/PF started.
Writer 870674/QSPLJOB/PJ started.
find the printer you are looking for.
use F10 to display all - to see other commands/ jobs near that time and not
just the CPF3382 msg
for commands/jobs - can use F1 to display the log message details, and F9
(message details) in that display will show user and job that executed
(STRPRTWTR command executed by user QSPLJOB, but the job log
tells me who made the request
wrkjob 870674/QSPLJOB/PJ
5770SS1 V7R5M0 220415 Job Log
S104E00P 05/27/25 23:10:01 E
Job name . . . . . . . . . . : PJ User . . . . . . :
QSPLJOB Number . . . . . . . . . . .
Job description . . . . . . : QSPLPRTW Library . . . . . :
QGPL
MSGID TYPE SEV DATE TIME FROM
PGM LIBRARY INST TO PGM L
CPF1124 Information 00 05/27/25 22:39:14.789228
QWTPIIPP QSYS 04DC *EXT
Message . . . . : Job
870674/QSPLJOB/PJ started on 05/27/25 at 22:39:14 in
subsystem QSPL in QSYS. Job entered
system on 05/27/25 at 22:39:14.
*NONE Request 05/27/25 22:39:14.807873
QWTSCSBJ *N QCMD Q
* From user . . . . . . . . . :
JIMF *
btw - i previously changed job description logging levels so that detailed
logging occurs to track down printing issues..
Job description: QSPLPRTW Library: QGPL
Message logging:
Level . . . . . . . . . . . . . . . . . . . . : 4
Severity . . . . . . . . . . . . . . . . . . . : 0
Text . . . . . . . . . . . . . . . . . . . . . : *SECLVL
Log CL program commands . . . . . . . . . . . . : *YES
Job log output . . . . . . . . . . . . . . . . . : *SYSVAL
The audit journals will show you details but only if you are auditing for
them - the following has a pretty clear description to get auditing of
STRPRTWTR
https://www.ibm.com/support/pages/using-object-auditing-track-use-print-related-commands
hth
Jim Franz
On Tue, May 27, 2025 at 5:44 PM Prakash Shanmugam <pshanmug@xxxxxxxxx>
wrote:
Hi,
We encountered a Prod issue, due to someone attached a writer to a
non-printing outq. This caused all documents to stop printing through ACOM.
Would like to find, who did that change, so can insist not to repeat in
future and try to add some restrictions.
Checked the history log and audit journals, but could not find.
Also used following SQL query, but no luck:
select * from
table(qsys2.history_log_info('2025-05-24-00.00.00.000000','2025-05-27-09.20.00.000000'))
A
Any suggestions or pointers on how to find who did it & when?
Thanks!
--
This is the RPG programming on IBM i (RPG400-L) mailing list
To post a message email: RPG400-L@xxxxxxxxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: https://lists.midrange.com/mailman/listinfo/rpg400-l
or email: RPG400-L-request@xxxxxxxxxxxxxxxxxx
Before posting, please take a moment to review the archives
at https://archive.midrange.com/rpg400-l.
Please contact support@xxxxxxxxxxxxxxxxxxxx for any subscription related
questions.
midrange.com
