000012091 - How to edit the auditpgm.txt file to configure log levels?

Document created by RSA Customer Support Employee on Jun 14, 2016Last modified by RSA Customer Support Employee on Apr 21, 2017
Version 2Show Document
  • View in full screen mode

Article Content

Article Number000012091
Applies ToRSA enVision
IBM ISeries (AS400)
IBM Journal Codes
IssueHow to edit IBM Series log levels?
Not satisfied with the amount of logs being collected from the ISeries Host
CauseThe level of logs we currently collect is configured in a file called 'auditpgm.txt'...located in the E:\nic\<version>\<sitename>\webapps\pi\help\Content folder.
Resolution

The 'auditpgm.txt' file can be downloaded from SecurCare Online.  Found in RSA enVision > Device Configuration Section...under IBM ISeries (AS400).

This default configuration uses an IBM Journal Code of (T) to retrieve all IBM Audit Trail Entries:
     IE    JRNCDE((T))

See this link for more information on IBM Journal Codes.

While this file can certainly be edited to reflect a different level of logs to be collected, be sure to make note of this in the file...and be sure to preserve the original file with the default configuration before making your changes.

For technical assistance issues with data collection from the IBM Series, RSA Systems Support may ask you to restore the default file for troubleshooting purposes.

Please note that support assistance may be limited with custom changes in this file.

Legacy Article IDa43649

Attachments

    Outcomes