How do I archive information for a file using Archive File Generation (DDARC) in Data Auditing and R (NETIQKB30716)

goal
How do I archive information for a file using Archive File Generation (DDARC) in Data Auditing and Reporting?

fact
VigilEnt Security Agent for iSeries 5.4/7.0

fact
VigilEnt Security Agent for PSAudit 7.5

fact
Data Auditing and Reporting (DAR)

fix

Archive File Generation allows you to archive journaled data to a user specified file.  The user defined file name is specified by using the steps below.  The file to receive the archived data is created during this process.

1. At a command line type PSMENU.
2. Press Enter.
3. Select Option 1 PSAudit.
4. Press Enter.
5. Select Option 3 Data Auditing and Reporting.
6. Press Enter. The Work with Files screen will display.
7. Select Opt 7=Work with Archives next to the file. 
8. Press Enter. The Work with Archive Information screen will display.
9. Enter 'Y' (Yes) in the Archive Status field and enter the following information:
• Archive File: File name used to Archive data.
• Archive Library:  Library name where the archived data is stored.
10. Press Enter to update.

When you are ready to populate the file with journaled information. Use the following steps from the Work With Files screen:

1. Press F11=Sys Menu.
2. Select Option 5  Archive File Generation (DDARC).
3. Press Enter.
4. Specifie the name and library of the file that will be Archived.           
5. Select the Range of Receivers to pull information from.  Specify the starting (first) and ending (last) journal receivers (the receiver range) that contain the journal entries to include. DAR starts with the starting journal receiver (as specified by the first value) and proceeds through the receiver chain until the ending receiver (as specified by the last value) is processed. If dual receivers are used at any time, the first of the receivers is used when chaining through the receivers. The Work with Journal Attributes. (WRKJRNA) command can be used to show the order of the  receivers in the receiver chain.   You can specify *CURRENT, the journal receiver that is currently attached is used, or *CURCHAIN, the journal receiver chain that includes the journal receiver that is currently attached.   Use F1=Help on the screen for more details.           

To schedule this job to run on a regular basis, refer to the following Knowledge Base article: 

• NETIQKB37668:  How to Schedule the DDARC job      

Note:  The files must be configured in Data Auditing and Reporting first, with Archive=Yes specified.  Run this option before deleting any Journal Receivers, otherwise the data will not be archived and will not be available for DAR reports.

Formerly known as NETIQKB30716