Step 2: Setting Log and Journal Retention Parameters

To preserve disk storage capacity and improve query response time, retain transactions for no more than the minimum period necessary to maintain an effective audit program.

Define how long to retain the Audit logs and journals for, and define whether to run a backup program that will run automatically before the logs and journals are deleted at the end of the retention period.

NOTE: The IBM i (OS/400) journal receiver may contain data not recorded in the Audit history log. Therefore, it is highly recommended that you retain and backup the journal in addition to the history log.

1. Select 9. Log Retention from the Audit Main Menu (STRAUD > 81 > 9), shown in Starting Audit for the First Time. The Log & Journal Retention screen appears. The recommended initial settings are displayed below.

​                           ​ Log & Journal Retention​          ​ 23⁄07⁄19​ 11:39:11​                                                                                   ​ Log retention period (days) . . . . . . .​ ​    7​         ​ Days, 9999=*NOMAX​      ​ Backup program for logs . . . . . . . . .​ ​ *NONE     ​   ​ Name, *STD, *NONE​      ​ Backup program library  . . . . . . . . .​ ​           ​                           ​ A specified backup program may run before deleting old logs. It will backup ​    ​ all data deleted after the retention period expires.  The *STD backup       ​    ​ program source is in SMZ4⁄AUSOURCE AULOGBKP.                                ​                                                                                     ​ Keep deleted users for revival (days) . .​ ​  10​          ​ Days, 999=*NOMAX​                                                                                        ​ The following parameters apply to the audit journal receivers.  This is   ​      ​ the primary data source for Audit. You should always backup the journal   ​      ​ receiver because it may contain data not logged in Audit.                 ​      ​ QAUDJRN receivers retention period (days)​ ​    5​         ​ Days, 9999=*NOMAX  ​    ​ Backup program for journal  . . . . . . .​ ​ *NONE     ​   ​ Name, *STD, *NONE​      ​ Backup program library  . . . . . . . . .​ ​           ​                           ​ A specified backup program may run before deleting old journal receivers.   ​    ​ It will backup data deleted after the retention period expires. The *STD    ​    ​ program is SMZ4⁄AUSOURCE AUJRNBKP.                                          ​                                                                                     ​ F3=Exit   F12=Cancel                                                      ​                                                                                       ​                                                                                 ​

2. Enter the required fields as defined below and press Enter.

Parameter	Description
Log retention period (days)	Transactions are retained for the specified number of days. At the end of this period, transactions are purged from the log. Enter 9999 to retain all data indefinitely.
Backup program for logs	Enter the name of the backup program to use to back up logs. Type *STD to use the Audit standard backup program or *NONE for no backup. You must ensure the appropriate backup media is loaded before the automatic backup program runs.
Backup program library	Enter the name of the library where the Backup program is stored.
Keep deleted users for revival (days)	Enter the number of days for which deleted users are stored on the system. Enter 999 to keep all users indefinitely.
QAUDJRN receivers retention period (days)	Transactions are retained for the specified number of days. At the end of this period, transactions are purged from the journal. Enter 9999 to retain all data indefinitely.
Backup program for journal	Enter the name of the backup program to use to back up journals. Type *STD to use the Audit standard backup program or *NONE for no backup. You must ensure the appropriate backup media is loaded before the automatic backup program runs.
Backup program library	Enter the name of the library where the Backup program is stored.