How do I watch for changes being made to files on my AS/400 (iSeries) machine? (NETIQKB24817)

  • Document ID:7724817
  • Creation Date:02-Feb-2007
  • Modified Date:08-Oct-2007
    • Micro Focus Products:
      Security Solutions for iSeries

Resolution

goal
How do I watch for changes being made to files on my AS/400 (iSeries) machine?

fact
VigilEnt Security Agent for iSeries

fact
VigilEnt Security Agent for iSeries PSAudit

fix

In PSAudit, System Auditing and Reporting, there is the 'Objects Accessed (Changed)' report. There is a prerequisite; the Object Auditing (OBJAUD) parameter of the object must specify *CHANGE before it can be audited and appear on this report. This can be accomplished with the CHGOBJAUD command.

The menu path to this report is as follows:

  1. At a command line type PSMENU, press Enter.
  2. Select Option 1 PSAudit, press Enter
  3. Select Option 1 System Auditing and Reporting, press Enter.
  4. Select Option 5 Security Reports Menu, press Enter.
  5. Select Option 3 User and Object Reports Menu, press Enter.
  6. Select Option 7 Objects Accessed (Changed), press Enter.

 



note
You can auditing specific files in the Data Auditing and Reporting feature of PSAdudit.

Additional Information

Formerly known as NETIQKB24817