with JOURNALENTRIES as (
select JT.CURRENT_USER as THE_CURRENT_USER, JOB_NAME, PROGRAM_NAME,
       JOURNAL_ENTRY_TYPE concat '-' concat
       cast(cast(substr(ENTRY_DATA, 1, 1) as char(1)) as char(1) ccsid 37)
       as ENTRY_TYPE_AND_SUBTYPE
from table (
QSYS2.DISPLAY_JOURNAL(
JOURNAL_LIBRARY => ('QSYS'), JOURNAL_NAME => ('QAUDJRN'),
STARTING_TIMESTAMP => (CURRENT_TIMESTAMP - 10 minutes), JOURNAL_CODES => 'T',
INCLUDE_INTERNAL => 'NO' -- not interested in journal management entries
)
) as JT
)
select count(*) as NUMBER_ENTRIES, ENTRY_TYPE_AND_SUBTYPE, JOB_NAME,
       THE_CURRENT_USER, PROGRAM_NAME
from JOURNALENTRIES
group by ENTRY_TYPE_AND_SUBTYPE, JOB_NAME, THE_CURRENT_USER, PROGRAM_NAME
order by count(*) desc
fetch first 30 rows only