BalkanM

AS400 Journal Probe

Discussion created by BalkanM on May 12, 2012

Hi All,

 

We are having journal probe high cpu utilization for our AS400 machine due to excessive of journal entries. It constantly uses 20% Cpu.

I have compared with Tivoli ITM iseries agent that reads only journal code 'T' which is audit trail. But it seems nimsoft journal probe reads all entries regardless there is profile or not, Do you have similar problems?

 

Journal code descriptions

Following are descriptions of all the possible journal codes or categories of journal entries.

Journal Code A - System Accounting Entry

Journal entries with a journal code of A contain information about job accounting. Refer to Work

Management

for a detailed description of the contents of converted journal entries with journal code A.

Journal Code B- Integrated File System

Journal entries with a journal code of B contain information about changes to integrated file system

objects. The only integrated file system objects that are supported are those with an object of type *STMF,

*DIR or *SYMLNK. These objects must be in the Root (’/’), QOpensys, and User-defined file systems. See

the Integrated file system topic for more information about file systems.

Journal Code C - Commitment Control Operation

Journal entries with a journal code of C contain commitment control information.

Journal Code D - Database File Operation

Journal entries with a journal code of D contain file level information about changes for a physical file, not

an individual member.

Journal Code E - Data Area Operation

Journal entries with a journal code of E contain information about changes to journaled data areas. See

Work Management

for more information about data areas.

Journal Code F - Database File Member Operation

Journal entries with a journal code of F contain file level information about changes for a physical file

member that are being journaled to this journal. (If you use a logical file in a program, the file level

information reflects the physical file on which the logical file is based.) Journal entries with journal code F

can also contain file level information for access paths that are associated with physical or logical file

members that are being journaled to this journal.

Journal Code I - Internal Operation

Journal entries with a journal code of I contain information about access paths or indexes or other internal

operations. Entries with a journal code of I are displayed only if JRN(*INTSYSJRN) is specified or

INCHIDENT(*YES) is specified on the DSPJRN command.

Journal Code J - Journal or Receiver Operation

Journal entries with a journal code of J contain information about the journal and the journal receivers.

Journal management 133

Journal Code L - License Management

Journal entries with a journal code of L contain information about license management, such as changes

to the usage limit and usage limit violations.

Journal Code M - Network Management Data

Journal entries with a journal code of M contain information about Network Management, including TCP/IP.

For a description of the TCP/IP entries, see TCP/IP Configuration and Reference

. For a description of the Network Management entries, see Simple Network Management Protocol

(SNMP) Support

.

Journal Code O - Object-Oriented Entry

Journal entries with a journal code of O contain object-oriented information. These entries are reserved for

future use.

Journal Code P - Performance Tuning Entry

Journal entries with a journal code of P contain information about performance. For the description of the

layout of these entries, refer to Work Management

.

Journal Code Q - Data Queue Operation

Journal entries with a journal code of Q contain information about changes to journaled data queues. See

CL Programming

for more information about data queues.

Journal Code R - Operation on Specific Record Journal entries with a journal code of R contain

information about a change to a specific record in the physical file member that is being journaled to the

journal. For a given physical file member, the record-level journal entries appear in the journal in the order

that the changes were made to the file.

Journal Code S - Distributed Mail Services

Journal entries with a journal code of S contain information about SNA distribution services (SNADS),

X.400, and mail server framework. For the description of the layout of these entries, refer to these books:

v SNA Distribution Services

v AnyMail/400 Mail Server Framework Support

Journal Code T - Audit Trail Entry

Journal entries with a journal code of T contain auditing information. For the description of the layout of

134 iSeries: Journal management

audit journal entries, see iSeries Security Reference

.

Journal Code U - User-Generated Entry

Journal entries with a code of U are sent to the journal receiver by the Send Journal Entry (SNDJRNE)

command or by the Send Journal Entry (QJOSJRNE) API. Send your own journal entries provides more

information.

 

 

Regards

Mehmet

Outcomes