*AUTFAIL Log Authority failures - High
*DELETE Log deletion of objects - High
*OBJMGT Log object management changes - High
*SYSMGT Log changes to certain system management areas - High
*SAVRST Log restore actions to security sensitive objects - High
*SECURITY Log security related changes - High
*SERVICE Log usage of the system and hardware service tools - High
*PGMFAIL Log Program failures caused by security violations - High
*CREATE Log creation of new objects - Medium
*JOBDTA Log job events such as start and stop - Medium
*PGMADP Log usage of programs that adopt authority- Medium
*NETCMN Log APPN firewall events - Low
*OFCSRV Log Office Vision/400 security changes - Low
*OPTICAL Log usage of optical storage devices - Low
*PRTDTA Log printing functions - Low
*SPLFDTA Log usage of spooled files (reports) - Low