Work Management Standards › Implementation of Security › Generic Implementation of Security › Audit Trails

Audit Trails

When security is particularly important, it is a good idea to design applications with an audit trail, so that all potentially sensitive actions are recorded automatically. There are some particular techniques useful for creating audit trails:

• Use QHST. Specify that a particular message is to be copied to the log by specifying LOG(*YES) on the OS/400 Create Message Description (CRTMSGD) command. This causes a copy of the message to be placed on the QHST message queue.
• Use a journal. Use a journal for an audit trail. Copies of sensitive requests can be written to the journal as user-defined entries. Individual journal entries cannot be deleted. You should secure the journal and its receiver:

  CRTJRNRCV JRNRCV(TRAIL) PUBAUT(*NONE)