I have a SYSPLEX with 5 LPARs. Do I need to run the logstream job on each LPAR or is it okay to run job once and share the logstream between the LPARs?
COMPLIANCE EVENT MANAGER uses a System Logger logstream that is defined as a DASD-only.
So from the IBM documentation:
efining a log stream as DASD-only https://www.ibm.com/support/knowledgecenter/en/SSLTBW_2.1.0/com.ibm.zos.v2r1.ieaa600/dasdy.htm
Note that a DASD-only log stream is single-system in scope - only one system may write to a DASD-only log stream.
So the answer is the Logstream will need to run on each LPAR.