The SQL/QRY audit report is not showing any data for STRSQL. (NETIQKB72194)

  • 7772194
  • 08-Apr-2010
  • 13-Dec-2013

Environment

NetIQ Security Solutions for iSeries 8.1

Situation

The SQL/QRY report is not showing any SQL data at all, all SQL/QRY monitor setup steps have been followed:

1. The ZPSAMON subsystem is up.
2. Query commands have been selected for auditing on the "Work with SQL auditing" screen (From PSMENU, take options 1,1,7
3. Instructions for possible STRDBMON outfile issues (e.g. NETIQKB70910) have been followed.

and data still does not appear on the SQL/QRY audit report, I am on OS/400 V5R4 or higher.

Resolution

OS/400 V5R4 and higher uses proxy commands which do not include a CPP which the SQL/QRY monitor uses, our exit program needs to be added manually using command:

ADDEXITPGM EXITPNT(QIBM_QCA_RTV_COMMAND)    
            FORMAT(RTVC0100)                 
            PGMNBR(*LOW)                     
            PGM(PSAUDIT/SAR0503B1)           
            REPLACE(*NO)                     
            PGMDTA(*JOB 20 'STRSQL    QSYS')

Moving forward, any new query commands setup should appear.

Additional Information

Formerly known as NETIQKB72194