NetIQ Security Solutions for iSeries
System Auditing and Reporting (SAR)
No activity is showing for the query commands I set up in SAR.
Using SAR option 26 does not collect activity for the commands I set up.
I used the Start SQL/QRY Monitor option to start the query monitor, but nothing is happening with the commands I set up with the Work with SQL/QRY Auditing option.
I used SAR option 26 to start the query monitor, but am not collecting any activity related to the query commands I set up with option 28.
Option 26 starts the ZPSAMON subsystem and the PSASQLMON job under the subsystem that is required to monitor activity. However, if you used option 27 to end the PSASQLMON job, the subsystem is still running, but the PSASQLMON job that is needed to capture activity is not active.
To start the ZPSAMON subsystem and place the PSASQLMON monitor job under it:
- On an iSeries command line, type
PSAUDIT/PSASQLMON ACTION(*START)and press Enter.
- If you want to run this command after each IPL, add this command to your startup job.
Option 27 (End SQL/QRY Monitor) ends the PSASQLMON job, but does not end subsystem ZPSAMON. To end the subsystem ZPSAMON, use the