000026587 - How to reduce the amount of AS400 logs collected on the first run

Document created by RSA Customer Support Employee on Jun 14, 2016Last modified by RSA Customer Support Employee on Apr 21, 2017
Version 3Show Document
  • View in full screen mode

Article Content

Article Number000026587
Applies ToRSA enVision
IBM ISeries (AS400)
IssueThe data log from the AS/400 (AS400) can be very large to start with, even in excess of 40GB.
Resolution

Option 1

Find the following lines in the AS/400 device configuration file auditpgm.txt
              CHGDTAARA AUDITLIB/DATE '010101'
              CHGDTAARA AUDITLIB/TIME '000000'
The auditpgm.txt file can be modified for a different initial start date/time, by changing the value for both these lines.
The DATE should be in the format YYMMDD and TIME in the format HHMMSS.

The 'auditpgm.txt' file can be downloaded from the RSA SecurCare Online (SCOL) website.
It is found in RSA enVision > Device Configuration Section, under device IBM ISeries (AS400).

Option 2

If changing the default values in the file auditpgm.txt is not preferred then on the AS/400, create the files AUDITLIB/DATE and AUDITLIB/TIME.
Enter into these files the desired start DATE and TIME, enter values in the format YYMMDD and HHMMSS.

Legacy Article IDa51468

Attachments

    Outcomes