How can I filter out iSeries (AS400) logs so that they don't send the entire transaction journal to the collector?
DSPJRN JRN(QSYS/QAUDJRN) (*CURCHAIN) +
FROMTIME(&DATEVAR &TIMEVAR) JRNCDE((T)) +
OUTPUT(*OUTFILE) OUTFILFMT(*TYPE5) +
OUTFILE(AUDITLIB/AUDITDTA) ENTDTALEN(*CALC)
Modified to collect 3 record types:
DSPJRN JRN(QSYS/QAUDJRN) RCVRNG(*CURCHAIN) +
FROMTIME(&DATEVAR &TIMEVAR) +
JRNCDE((T)) +
ENTTYP(JS AF AU ) OUTPUT(*OUTFILE) +
OUTFILFMT(*TYPE5) OUTFILE(AUDITLIB/AUDITDTA) +
ENTDTALEN(*CALC)
List of all Journal Codes can be found in the iseries Device configuration guide which can be downloaded from RSA Secure Care online:
https://knowledge.rsasecurity.com/scolcms/set.aspx?id=182
Related Articles
RSA Governance & Lifecycle Integration: IBM iSeries AS400 Summary 24Number of Views How to reduce the amount of AS400 logs collected on the first run 36Number of Views Some aliases are lost in a migration from Authentication Manager 6.1 to Authentication Manager 8.1 for users where there a… 26Number of Views RSA Governance & Lifecycle Integration Matrix Summary 147Number of Views RSA Authentication Manager 8.7 SP2 Azure Virtual Appliance Getting Started 188Number of Views
Trending Articles
Connection fails to Cloud Authentication Service when connecting through a proxy server from RSA Authentication Manager to… Downloading RSA Authentication Manager license files or RSA Software token seed records Unable to login to RSA Authentication Manager Security Console as super admin RSA Authentication Manager 8.9 Release Notes (January 2026) How to manipulate imported RSA SecurID Software Token(s) on an iPhone or iPad device