Resolution
fact
NetIQ Security Solutions for iSeries
fact
PSAudit 8.0
fact
System Access Analysis (SAA)
symptom
Joblogs are not deleted by SAA even though it's configured to delete joblogs after capture.
symptom
There are joblogs for interactive jobs both on the system and in SAA database after I SIGNOFF of the system.
symptom
I selected value "Y" for Delete Joblogs but I still see joblogs in both SAA and via WRKSPLF for the profile.
cause
Changing command default for LOG parameter to '*LIST' on SIGNOFF command will cause the system to produce joblog spooled files regardless of System Access Analysis configuration
fix
NetIQ Security Solutions for iSeries
fact
PSAudit 8.0
fact
System Access Analysis (SAA)
symptom
Joblogs are not deleted by SAA even though it's configured to delete joblogs after capture.
symptom
There are joblogs for interactive jobs both on the system and in SAA database after I SIGNOFF of the system.
symptom
I selected value "Y" for Delete Joblogs but I still see joblogs in both SAA and via WRKSPLF for the profile.
cause
Changing command default for LOG parameter to '*LIST' on SIGNOFF command will cause the system to produce joblog spooled files regardless of System Access Analysis configuration
fix
To resolve this issue, change the command default for LOG parameter to '*NOLIST' on SIGNOFF command.
Additional Information
Formerly known as NETIQKB55824