The short answer to that question is no, but there are at least two scenarios where it makes more sense to use the Authority Collection feature added in V7R3 than the audit journal. Read on for details!
By Carol Woodbury
During a class I was teaching, someone asked if they should stop auditing the commands a user was running and enable Authority Collection to log users’ activity instead. Since her need was to log users’ activity to satisfy audit/compliance requirements, the answer to her question was a resounding no. That made me wonder if others have similar questions about replacing the operating system’s auditing features with the Authority Collection features. While there are two instances where I think you’ll want to use Authority Collection rather than the audit journal, there are no scenarios that justify reducing what you’ve currently configured for auditing.