/JOURNAL[=journal-name]

    Specifies the name of the audit journal; the name defaults to
    SECURITY. (Currently, there is only one journal.)

    The /JOURNAL qualifier is required when redefining the audit log
    file or when specifying resource monitoring characteristics with
    the /RESOURCE or the /THRESHOLD qualifier.