Definition
QHST is the IBM i history log. It consists of a message queue and log-version physical files that record a high-level trace of system activity, including system, subsystem, job, device, and system message information.
QHST can add operations context to a SIEM investigation, but it is not a replacement for QAUDJRN. The two sources record different kinds of evidence and should be selected according to the investigation questions the team needs to answer.