Log Types: OS400Log

Owned by Leigh Purdie (Unlicensed)
Sept 16, 2020
1 min read

Overview

The IBM OS/400 operating system was created for the AS/400 and AS/400e line of IBM business computers.

Collection

OS400 logs can be transferred to the directory /data/SnareCollect/OS400Log via FTP using the user 'snarexfer'. Logs will be processed daily, at around midnight.

Snare is capable of coping with a range of log formats, as long as the header line, specifying the log format, is included as the first line in each exported file.

Snare understands the following fields:

  • Journal Code (JournalCode)

  • Journal Entry Code (JournalEntryCode)

  • Journal Entry Date (Date)

  • Journal Entry Time (Time)

  • System name (System)

  • Job Name (JobName)

  • User Name (JobUser)

  • Job Number (JobNumber)

  • Program Accessing Object (Program)

  • Object Failure Object Name (OFName)

  • Object Failure Library Name (OFLibrary)

  • Object Failure Object Type (OFType)

  • Failed Login User (Strings)

  • Failed Login Job (Strings)

  • System Value name (Strings)

  • Changed Value (Strings)

Sample Events

COLDEV OS400Log 0 2017-10-13 12:34:56 T CP QPADEV0036 CHEEYV 75936 QMNCGPWD CHEEYV QSYS *USRPRF

Fields

Field

Description

Field

Description

DATE

Event date, in the format YYYY-MM-DD

TIME

Event time, in the format HH:MM:SS

SYSTEM

The source system

TABLE

OS400Log

JOURNALCODE

“T” in the sample above

JOURNALENTRYCODE

“CP” in the sample above

JOBNAME

QPADEV0036 in the sample above

JOBUSER

CHEEYV in the sample above

JOBNUMBER

75936 in the sample above

PROGRAM

QMNCGPWD in the sample above

OFNAME

CHEEYV in the sample above

OFLIBRARY

QSYS in the sample above

OFTYPE

*USRPRF in the sample above

STRINGS

Any event content that has not been allocated to an existing field.

Notes

-