iSeries

iSeries Log Rules are used to (surprisingly) consolidate iSeries server event logs.

Three log types can be consolidated:

  • Job Audit
  • Journal Audit
  • QHST Log

Based on the iSeries log selected, the available configuration options change.

More Information About iSeries/AS400 Rules

Job Name

iSeries job names are comprised of three elements:

  • Job number portion (a six-digit number with leading zeros)
  • Job user portion (limited to ten characters)
  • Job name portion (also limited to ten characters)

To supply a complete iSeries job name, use the job number, a right slash (“/“), the job user, another right slash, and then the job name portion. Ex. “002754/PETE/PAYROLL”

To supply a partial iSeries job name, omit the job number. Ex. “PETE/PAYROLL”

You can also specify the job name portion alone. Ex. “PAYROLL“.

Job name and job user must follow iSeries naming conventions. The name expression must begin with A-Z, #, $, or @. The remaining characters can be A-Z, #, $, @, or 0-9. No special characters such as “%” and “+” are allowed in iSeries name expressions.

Message Id

iSeries message identifiers are seven character expressions comprised to two elements:

  • Message prefix portion (which must be exactly three characters)
  • Message number (which must be exactly four characters)

The message prefix portion must follow iSeries naming conventions. The prefix portion of the message identifier must begin with A-Z, #, $, or @. The remaining characters can be A-Z, #, $, @, or 0-9. No special characters such as “%” and “+” are allowed in iSeries name expressions.

The message number portion of the message identifier must be four numeric characters and can include the hexadecimal characters A-F.

Examples of valid iSeries message identifiers are “CPF9010” and “CPF1F2A“.

Journal Code

iSeries journal codes are single character values.

For the security audit journal, only journal codes “T“, and “J” are used.

For example, specify “T” to select only that journal code from the audit journal. You can leave the input empty to select all of the journal codes.

Entry Type

iSeries journal entry types are two-character values. The first character must be A-Z. The second character must be A-Z, or 0-9.

For example, specify “DO” to select only journal entries related to deleted objects.

Program Name

iSeries program names must follow iSeries naming conventions. The program name expression must begin with A-Z, #, $, or @. The remaining characters can be A-Z, #, $, @, or 0-9. No special characters such as “%” and “+” are allowed in iSeries program names.

User Name

iSeries user IDs must follow iSeries naming conventions. The user ID expression must begin with A-Z, #, $, or @. The remaining characters can be A-Z, #, $, @, or 0-9. No special characters such as “%” and “+” are allowed in iSeries user IDs