Log QSH, PASE activity

To be able to log QSH and PASE activity, the iSecurity Capture module must be installed and active. You must capture all screens that can enter QSH or PASE commands.

1. Select 3. Log QSH, PASE activity in the iSecurity/Base System Configuration menu (STRAUD > 81 > 3). The Log QSHELL (QSH, PASE) Commands screen appears.

​                       ​ Log QSHELL (QSH, PASE) Commands​      ​ 23⁄07⁄19​ 11:38:19​                                                                                   ​ Type options, press Enter.​                                                                                                                                       ​ Log QSHELL (QSH, PASE) activity . .​ ​ Y​             ​ Y=Yes, N=No​                 ​ Audit can log QSH (STRQSH) and PASE (CALL QP2TERM) activities. Both are     ​    ​ Unix like shell interpreters. Some limitations exist. See manual.           ​                                                                                     ​ Minutes between collections . . . .​ ​  3​            ​ 99=*NOMAX​                   ​ Log collection is partially based on periodic activity.                    ​                                                                                      ​ Notes:​                                                                            ​ Audit type CD sub type 8 represents QSH commands.                        ​       ​ Audit type CD sub type 9 represents PASE commands.                       ​       ​ Interactive QSHELL activity is added to QAUDJRN, audit code U type RR.   ​                                                                                      ​ Prerequisites:                                                              ​      ​ The module iSecurity⁄Capture must be installed and active. All screens which​    ​ may enter QSH or PASE commands must be captured.                            ​                                                                                                                                                                    ​ F3=Exit   F12=Cancel                                                      ​                                                                                       ​                                                                                 ​

Parameter	Description
Log QSHELL (QSH, PASE) activity	Y = Yes N = No Audit can log QSH (STRQSH) and PASE (CALL QP2TERM) activities. Both are Unix-like shell interpreters.
Minutes between collections	01 – 99. 99 = *NOMAX Log collection is partially based on periodic activity.

2. Enter the required parameters and press Enter.

NOTE: Audit type CD sub type 8 represents QSH commands.
Audit type CD sub type 9 represents PASE commands.
Interactive QSHELL activity is added to QAUDJRN, audit code U type RR.