How to reduce the amount of AS400 logs collected on the first run
3 years ago
Originally Published: 2010-06-26
Article Number
000051073
Applies To
RSA enVision
IBM ISeries (AS400)
Issue
The data log from the AS/400 (AS400) can be very large to start with, even in excess of 40GB.
Cause
The default AS/400 device configuration file, auditpgm.txt is configured to start collecting logs from midnight 1Jan2001.
Resolution

Option 1

Find the following lines in the AS/400 device configuration file auditpgm.txt
              CHGDTAARA AUDITLIB/DATE '010101'
              CHGDTAARA AUDITLIB/TIME '000000'
The auditpgm.txt file can be modified for a different initial start date/time, by changing the value for both these lines.
The DATE should be in the format YYMMDD and TIME in the format HHMMSS.

The 'auditpgm.txt' file can be downloaded from the RSA SecurCare Online (SCOL) website.
It is found in RSA enVision > Device Configuration Section, under device IBM ISeries (AS400).

Option 2

If changing the default values in the file auditpgm.txt is not preferred then on the AS/400, create the files AUDITLIB/DATE and AUDITLIB/TIME.
Enter into these files the desired start DATE and TIME, enter values in the format YYMMDD and HHMMSS.


Don't see what you're looking for?