No activity is showing for the query commands I set up in SAR. (NETIQKB51379)

fact
NetIQ Security Solutions for iSeries

fact
PSAudit 8.0

fact
System Auditing and Reporting (SAR) 

symptom
No activity is showing for the query commands I set up in SAR.

symptom
Using SAR option 26 does not collect activity for the commands I set up.

symptom
I used the Start SQL/QRY Monitor option to start the query monitor, but nothing is happening with the commands I set up with the Work with SQL/QRY Auditing option.

symptom
I used SAR option 26 to start the query monitor, but am not collecting any activity related to the query commands I set up with option 28.

cause
Option 26 starts the ZPSAMON subsystem and the PSASQLMON job under the subsystem that is required to monitor activity. However, if you used option 27 to end the PSASQLMON job, the subsystem is still running, but the PSASQLMON job that is needed to capture activity is not active.

fix

To start the ZPSAMON subsystem and place the PSASQLMON monitor job under it:

1. On an iSeries command line, type PSAUDIT/PSASQLMON ACTION(*START) and press Enter.
2. If you want to run this command after each IPL, add this command to your startup job.

note
Option 27 (End SQL/QRY Monitor) ends the PSASQLMON job, but does not end subsystem ZPSAMON.  To end the subsystem ZPSAMON, use the ENDSBS ZPSAMON command.

Formerly known as NETIQKB51379