How can I filter out iSeries (AS400) logs so that they don't send the entire transaction journal to the collector?
DSPJRN JRN(QSYS/QAUDJRN) (*CURCHAIN) +
FROMTIME(&DATEVAR &TIMEVAR) JRNCDE((T)) +
OUTPUT(*OUTFILE) OUTFILFMT(*TYPE5) +
OUTFILE(AUDITLIB/AUDITDTA) ENTDTALEN(*CALC)
Modified to collect 3 record types:
DSPJRN JRN(QSYS/QAUDJRN) RCVRNG(*CURCHAIN) +
FROMTIME(&DATEVAR &TIMEVAR) +
JRNCDE((T)) +
ENTTYP(JS AF AU ) OUTPUT(*OUTFILE) +
OUTFILFMT(*TYPE5) OUTFILE(AUDITLIB/AUDITDTA) +
ENTDTALEN(*CALC)
List of all Journal Codes can be found in the iseries Device configuration guide which can be downloaded from RSA Secure Care online:
https://knowledge.rsasecurity.com/scolcms/set.aspx?id=182
Related Articles
RSA Governance & Lifecycle Integration: IBM iSeries AS400 Summary 24Number of Views How to reduce the amount of AS400 logs collected on the first run 36Number of Views Some aliases are lost in a migration from Authentication Manager 6.1 to Authentication Manager 8.1 for users where there a… 26Number of Views RSA Governance & Lifecycle Integration Matrix Summary 150Number of Views How to Install and Configure the RSA PAM Agent on Solaris Operating System with RSA Authentication Manager. 342Number of Views
Trending Articles
Quick Setup Guide - Passwordless Authentication in Windows MFA Agent for Active Directory RSA Authentication Manager 8.9 Release Notes (January 2026) Artifacts to gather in RSA Identity Governance & Lifecycle RSA Governance & Lifecycle 8.0.0 Administrators Guide RSA Governance & Lifecycle 8.0.0 Installation Guide