You can use journal monitors when you need to watch a journal for certain journal codes and entry types as they occur. You can monitor a journal for any activity that is important in your operating environment.
For example, you may want to define a monitor to watch a journal for F-EJ entries for a member within a file. These types of entries may indicate a problem such as journaling ended for file XYZ. Files indicated by these entries may no longer have adequate backup and recovery protection. Your event program could alert an operator or build a list of files, which is used by a program that attempts to resolve the problem.
In another example, you may want a monitor to watch for J-PR entries that indicate the start of a new journal receiver or for other journal codes associated with changing receivers. As journal receivers change you could have an event program that saves the journal receiver to tape. You might want an event program that checks if there are an unusually high number of receivers associated with the journal because that could indicate problems with your journal maintenance process.
Or, you may want to create a security monitor that reads the Security Audit Journal and watches for authority failure entries and notifies an operator when these entries occur.