IP Event History › Search the TCP/IP Events Database

Search the TCP/IP Events Database

The search facility lets you use predefined search criteria or define your own search criteria (custom search) using the fields from the TCP/IP events database to obtain specific information.

To perform a search

1. Enter /IPHIST.B at the prompt.

   The History Report List appears.

2. Enter S next to the type of search you want to perform.

   A panel for you to enter your search criteria appears.

3. Enter your search criteria, and press F6.

   Note: Fields prefixed by a plus (+) sign provide a list of values. You can access the list by entering ? in the field. For more information about the fields, press F1 (Help).

   The search results appear.

Examples of Custom Searches

Use the following examples to help you customize your own searches of the events database.

Custom Search: Example 1

This is an example of search criteria that produces a list of all Telnet terminal sessions that lasted for less than 10 minutes from an IP address with the 202 prefix.

PROD--------------------- Network Database : Search Criteria ------------------
Command ===>                                                    Function=Search
                                                                               
                                                     D=Delete I=Insert R=Repeat
    "("   Field          Opr  Value                              Gen ")"   Bool
        + $IPRECTYPE   + =    TS                               +         + AND 
        + $IPDURATION  + <    600                              +         + AND 
        + $IPRMTADDR   + =    202                              + YES     +     
        +              +                                       +         +     
        +              +                                       +         +     
        +              +                                       +         +     
         

Custom Search: Example 2

This is an example of search criteria that produced a list of all FTP events that failed.

PROD--------------------- Network Database : Search Criteria ------------------
Command ===>                                                    Function=Search
                                                                               
                                                     D=Delete I=Insert R=Repeat
    "("   Field          Opr  Value                              Gen ")"   Bool
    (   + $IPRECTYPE   + =    FS                               +         + OR  
        + $IPRECTYPE   + =    FC                               +     )   + AND 
        + $IPLASTREPL  + ¬=   2                                + YES     +     
        +              +                                       +         +     
        +              +                                       +         +     
        +              +                                       +         +     
        +              +                                       +         +

Custom Search: Example 3

This is an example of search criteria that produced a list of all file transfers for data sets with the SYS2 prefix.

PROD--------------------- Network Database : Search Criteria ------------------
Command ===>                                                    Function=Search

                                                     D=Delete I=Insert R=Repeat
    "("   Field          Opr  Value                              Gen ")"   Bool
    (   + $IPRECTYPE   + =    FS                               +         + OR  
        + $IPRECTYPE   + =    FC                               +     )   + AND 
        + $IPCOMMAND   + =    RETR                             +         + AND 
        + $IPDSNAME1   + =    SYS2                             + YES     +     
        +              +                                       +         +     
        +              +                                       +         + 
               
       

Custom Search: Example 4

This is an example of search criteria that, performed at the time of 4:00 pm produced a list of file transfers for the last hour.

PROD--------------------- Network Database : Search Criteria ------------------
Command ===>                                                    Function=Search

                                                     D=Delete I=Insert R=Repeat
    "("   Field          Opr  Value                              Gen ")"   Bool
    (   + $IPRECTYPE   + =    FS                               +         + OR  
        + $IPRECTYPE   + =    FC                               +     )   + AND 
        + $IPDATE      + =    24-NOV-2006                      +         + AND 
        + $IPTIME      + >=   150000                           +         +     
        +              +                                       +         +     
        +              +                                       +         +     
        +              +                                       +         +