System Auditing and Reporting reports have the old LPAR name on them after partitioning the machine. (NETIQKB31229)

fact
VigilEnt Security Agent for iSeries 5.4/7.0

fact
VigilEnt Security Agent for AS/400 5.3/6.3

fact
VigilEnt Security Agent for AS/400 5.2/6.2

fact
VigilEnt Security Agent for AS/400 5.1/6.1

symptom
System Auditing and Reporting reports have the old LPAR name on them after partitioning the machine.

cause
A new journal receiver was not generated after the partitioning.

fix

The system (LPAR) name is contained in the QAUDJRN journal receiver records. Generate a new receiver whenever a machine is partitioned.

To generate a new receiver type the following from a command line:

• CHGJRN  

OR

Proceed with the following steps:

1. From a command line type PSMENU, press Enter.
2. Select PSAudit (Option 1), press Enter.
3. Select System Auditing and Reporting (Option 1), press Enter.
4. Select System Setup and Defaults Menu (Option 7), press Enter.
5. Select Generate/Save/Clean-up Jrnl Recvrs (Option 5), press Enter.

Note: The new LPAR name will not be associated with any records until the new receiver is generated. Records that were generated before the new receiver was created will still have the old system (LPAR) name associated with them. It is possible that reports will contain mixed system (LPAR) if the reporting range is before and after the journal receiver was created.

Formerly known as NETIQKB31229