How can I filter out iSeries (AS400) logs so that they don't send the entire transaction journal to the collector?
DSPJRN JRN(QSYS/QAUDJRN) (*CURCHAIN) +
FROMTIME(&DATEVAR &TIMEVAR) JRNCDE((T)) +
OUTPUT(*OUTFILE) OUTFILFMT(*TYPE5) +
OUTFILE(AUDITLIB/AUDITDTA) ENTDTALEN(*CALC)
Modified to collect 3 record types:
DSPJRN JRN(QSYS/QAUDJRN) RCVRNG(*CURCHAIN) +
FROMTIME(&DATEVAR &TIMEVAR) +
JRNCDE((T)) +
ENTTYP(JS AF AU ) OUTPUT(*OUTFILE) +
OUTFILFMT(*TYPE5) OUTFILE(AUDITLIB/AUDITDTA) +
ENTDTALEN(*CALC)
List of all Journal Codes can be found in the iseries Device configuration guide which can be downloaded from RSA Secure Care online:
https://knowledge.rsasecurity.com/scolcms/set.aspx?id=182
Related Articles
Trending Articles
RSA Authentication Manager Upgrade Process RSA Release Notes for RSA Authentication Manager 8.8 RSA RADIUS Server service failed to start in the RSA Authentication Manager 8.1 Operations Console Microsoft Entra ID External MFA - Relying Party Configuration Using OIDC - RSA Ready Implementation Guide RSA Release Notes: Cloud Access Service and RSA Authenticators