Logging - or auditing, as it’s known on IBM i - was originally integrated into AS/400 version 2, release 3 to allow the system to comply with the rigorous logging requirements of the U.S. Government’s C2 Certification (Common Criteria is the current requirement for government contracts.) Prior to this addition, all security-related messages only went to the joblog and/or the history log (QHST.) To meet the rigid requirements, the IBM Security team in Rochester, MN chose to use a journal and journal receivers to hold audit journal entries. By using this architecture, IBM completely eliminated the need to have file integrity monitoring software that is required for logs on many other operating systems. This is because entries in a journal receiver (including an audit journal receiver) cannot be modified nor can they be removed.
