Example 1: Auditing changes made by a randomly selected user


For this example, assume that you are an auditor for a large banking institution. Banking requirements specify that you perform a monthly audit of all changes made by randomly selected users to ensure the integrity of the transactions. You must send a hardcopy report of these changes to the central auditing office.

You can specify a BMC AMI Log Master log scan step to create a filter that examines the AUTHID for a particular user ID, and define a time frame that spans all transactions for the month. 

BMC AMI Log Master produces the Audit report by default.

The following figure shows with changes to the selected authorization ID and the time frame, you can run the job whenever an auditor requests a random check. The following figure is an example of an audit process.

GUID-5E18D83E-FB27-4AC2-BD5B-1AF3E5EC2353-low.png

The overall process for this task is as follows:

  • Define a filter
  • Set the time frame
  • Change the default ordering of the Audit report

To audit data changes made by a randomly selected user

Complete the following series of panels:

On this panel

Take this action

Notes

Main Menu

Select Create Audit Report and press Enter.

None

Create Audit Report

Select Specify Log Filter Criteria and press Enter.

This step creates the filter to define search criteria.

Selectable Fields

Use the Structured or Free Form filter interface to define search criteria. Define a filter that selects records based on authorization ID JCARSON.

Press F3 until you return to the Create Audit Report panel.

Create Audit Report

Select Specify Time Frame and/or Input Source and press Enter.

This step specifies the time frame for the log scan. For instructions, see Defining-a-time-frame.

Time Frame Specification

Type dates and times to define the start and end points.

Press F3 until you return to the Create Audit Report panel.

Create Audit Report

Select Define Report and File Outputs and press Enter.

BMC AMI Log Master displays an Audit report request by default. This step changes the default ordering of the report.

Report and File Outputs

Type E in the ACT column to view the report requests. Verify that the report destination and the report ordering options meet your requirements.

Press F3 until you return to the Create Audit Report panel.

Create Audit Report

Select Work ID Options, JCL Generation, and press Enter.

This step saves the work ID and generates the JCL. For an example, see Creating-a-batch-job-from-a-work-ID.

Work ID File Menu

Select Save As.

Select Generate JCL for batch submittal.

The following is the filter for auditing log information:

FILTERS ==================== Structured Filter Maintenance ======= Line 1 of 1
Command ===> ________________________________________________ Scroll ===> HALF
SSID: DB2R
Work ID . . : ABC.AUTHID
Description : AUDIT CHANGES MADE BY A RANDOMLY SELECTED USER
Updated Version: V13.01.00

Type one or more action codes. Then press Enter.
    C=Catalog Search I=Insert D=Delete E=Edit O=Logical OR
ACT      SELECTABLE FIELD   OPERATOR VALUE
 _        AUTH ID           =        JCARSON
********************************* End Of List *********************************

 

Tip: For faster searching, add an asterisk to the end of your partial query. Example: cert*