How can I filter out iSeries (AS400) logs so that they don't send the entire transaction journal to the collector?
DSPJRN JRN(QSYS/QAUDJRN) (*CURCHAIN) +
FROMTIME(&DATEVAR &TIMEVAR) JRNCDE((T)) +
OUTPUT(*OUTFILE) OUTFILFMT(*TYPE5) +
OUTFILE(AUDITLIB/AUDITDTA) ENTDTALEN(*CALC)
Modified to collect 3 record types:
DSPJRN JRN(QSYS/QAUDJRN) RCVRNG(*CURCHAIN) +
FROMTIME(&DATEVAR &TIMEVAR) +
JRNCDE((T)) +
ENTTYP(JS AF AU ) OUTPUT(*OUTFILE) +
OUTFILFMT(*TYPE5) OUTFILE(AUDITLIB/AUDITDTA) +
ENTDTALEN(*CALC)
List of all Journal Codes can be found in the iseries Device configuration guide which can be downloaded from RSA Secure Care online:
https://knowledge.rsasecurity.com/scolcms/set.aspx?id=182
Related Articles
Trending Articles
Downloading RSA Authentication Manager license files or RSA Software token seed records RSA MFA Agent 2.3.6 for Microsoft Windows Installation and Administration Guide Quick Setup Guide - Passwordless Authentication in Windows MFA Agent for Active Directory Mandatory Certificate Upgrade Required by 6th October 2025 for RSA MFA Agent for PAM, RSA MFA Agent for Apache, and Third … RSA Authentication Manager 8.9 Release Notes (January 2026)