Selecting Screen Capture Sessions for Audit

You can work with screen capture sessions from either current data or restored data.

1. From the Capture main menu, select either 41. Display Current Log or 42.Display Restored Log . The Display Captured Data command screen appears. This screen allows you to select and display only those capture sessions that you wish to work with.

​ ​  ​       ​  ​      ​      Display Captured Log (DSPCPTLOG)      ​                    ​  ​       ​  ​                                                                     ​ Type choices, press Enter.​                                                                                                                                       ​ Display last n minutes . . . . .​  ​ *BYTIME​      ​ Number, *BYTIME                ​ Starting date and time:         ​  ​              ​                                ​   Starting date  . . . . . . . .​  ​ *CURRENT  ​   ​ Date, *CURRENT, *YESTERDAY...  ​   Starting time  . . . . . . . .​  ​ 000000  ​     ​ Time                           ​ Ending date and time:           ​  ​              ​                                ​   Ending date  . . . . . . . . .​  ​ *CURRENT  ​   ​ Date, *CURRENT, *YESTERDAY...  ​   Ending time  . . . . . . . . .​  ​ 235959  ​     ​ Time                           ​ User . . . . . . . . . . . . . .​  ​           ​   ​ Name, generic*                 ​ Screen . . . . . . . . . . . . .​  ​           ​   ​ Name, generic*                 ​ IP generic* address  . . . . . .​  ​                  ​                            ​ String included in description  ​  ​                                                    ​                                                                           ​ Data library . . . . . . . . . .​ >​ *CURRENT​     ​ Name, *SELECT, *PRV...         ​ Output . . . . . . . . . . . . .​  ​ *      ​      ​ *, *PDF, *PRINT, *PRINT1-9     ​                                                                                                                                                                                                                                   ​        Bottom​  ​ F3=Exit   F4=Prompt   F5=Refresh   F10=Additional parameters   F12=Cancel        F13=How to use this display        F24=More keys                              ​                                                                                   ​

The body of the screen contains these fields:

Display Last n Minutes

Select only those records occurring within the previous number of minutes as specified by the user To use the values from the next field, enter *BYTIME.

Starting Date & Time / Ending Date & Time

Select only those records occurring within the range specified by the starting and ending date/time combination.

Enter an appropriate specific date or time or use these values:

• *CURRENT: Today (Current Date)
• *YESTERDAY: Previous date
• *WEEKSTR/*PRVWEEKS: Current week/Previous week
• *MONTHSTR/*PRVMONTH: Current month/Previous month
• *YEARSTR/ *PRVYEARS: Current year/ Previous year
• *SUN - *SAT: Day of week

User

IBM i (OS/400) user profile or profile group

Screen

Terminal session name (This is also the job name)

IP Generic Address

IP address in decimal notation. Leave blank for all IP addresses.

String included in description

Text contained in Capture session descriptions. Only sessions containing this text string in the description field will be displayed.

Data library

For restored data only: Enter the name of the library to which the data was backed up. The name of the library is SMCPyymmdd , where yymmdd is the date of the backup.

2. Press Enter to display the capture sessions for the selected date and time. The Work with Captures screen appears which allows you to select a specific capture session to view. Each line represents a single capture session.

​                              ​ Work with Capture​                     ​ iSecurity​                                                     ​ Position to . .​ ​           ​  ​ Type options, press Enter.             ​                                          ​ 1=Select​ ​ 5=Display job​ ​ 6=Print​ ​ 7=Search​ ​ 8=Print Command​ ​ 9=Email/IFS File​                           ​ Estimated​                 ​ Capture ​      ​ Capture ​     ​ Opt​ User  ​    ​ Terminal  ​ Frames​ ​ IP Address​        ​ Start​          ​ End  ​      ​ ​  ​ ​ AMNON     ​ QPADEV000C​    270​ ​ 1.1.1.***      ​ 23/04/25​ 10:16​         ​       ​ ​  ​ ​ AMNON     ​ QPADEV000V​     68​ ​ 1.1.1.***      ​ 23/04/25​ 11:18​         ​       ​ ​  ​ ​ AU        ​ QPADEV000F​    129​ ​ 1.1.1.***      ​ 23/04/25​ 11:15​         ​       ​ ​  ​ ​ DB        ​ QPADEV001X​     62​ ​ 1.1.1.***      ​ 23/04/25​ 10:34​         ​       ​ ​  ​ ​ DB1       ​ HAIMS1    ​      4​ ​ 1.1.1.***      ​ 23/04/25​ 11:27​ 23/04/25​ 11:32 ​ ​  ​ ​ DB1       ​ QPADEV001Z​      3​ ​ 1.1.1.***      ​ 23/04/25​ 11:23​         ​       ​ ​  ​ ​ DB1       ​ QPADEV001Z​      1​ ​ 1.1.1.***      ​ 23/04/25​ 11:44​         ​       ​ ​  ​ ​ JOE       ​ QPADEV0007​    126​ ​ 1.1.1.***      ​ 23/04/25​  9:40​         ​       ​ ​  ​ ​ JOE       ​ QPADEV0009​     18​ ​ 1.1.1.***      ​ 23/04/25​ 10:04​         ​       ​ ​  ​ ​ OD        ​ HAIMS1    ​     74​ ​ 1.1.1.***      ​ 23/04/25​  9:38​ 23/04/25​ 11:27 ​ ​  ​ ​ PERLA     ​ QPADEV000X​     50​ ​ 1.1.1.***      ​ 23/04/25​ 10:39​         ​       ​                                                                                                                                                                                                                                                                                                                                                                                                      ​       Bottom​  ​ F3=Exit​  ​ F5=Refresh​  ​ F7=Subset​  ​ F11=Alt view​  ​ F12=Cancel​  ​ F13=Repeat​       ​                                                                                 ​

• 1: Replay screens in the selected capture session
• 5: Display the IBM i (OS/400) Display Job ( DSPJOB ) menu for the selected capture session (Active jobs only)
• 6: Print selected frames in the selected capture session
• 7: Perform a free text search on the selected capture session. Type the search string in the pop-up window that appears and then press Enter to jump to the first screen containing the search string.
• 8: Print the selected Capture session
• 9: Mails the selected capture session as an HTML email

You can use these function keys in addition to the usual ones:

• F7: Refine selection parameters to display a smaller subset of the capture

  sessions

• F11: Toggle the screen display to show different capture session parameters
• F13 (Shift+F1): Repeat the option entered on the current line for all subsequent lines. For example, if you type ‘ 1 ’ to select the fifth line, you can press F13 to select all lines that follow.