IBM i Auditing Planning

When planning on what to audit on your IBM i, you can use two different areas:

  • Action auditing.
  • Object auditing.

Action Auditing

Action auditing is the action to log system-wide, security-relevant events. Action auditing is available at system-level and/or user-level. Examples include:

  • User profile changed.
  • User profile created.
  • Object restore.
  • Actions to spooled files.

Object Auditing

Object auditing is the action to log specific object-related, security-relevant events. Object auditing is also available at system level and/or user-level. Examples include:

  • Only for Object Changes.
  • All Accesses to Object.