FLASHBACK AUDITLOG Command—Generate Audit Report

Commands › FLASHBACK AUDITLOG Command—Generate Audit Report

FLASHBACK AUDITLOG Command—Generate Audit Report

The FLASHBACK AUDITLOG command:

Generates detailed reports on event records created by the Audit Events component
Produces one line of output per record

To change the number of columns per line, specify audit ID options with the FLASHBACK LIST command.

Logs are listed in chronological order based on the time when the audit event occurred and cannot be sorted. You can run flashback reports against the flashback file, the archive file, or a backup of the archive file (a log file).

Important! Each flashback report must be run as a single report in a separate run. In other words, you cannot specify another primary report command in a job stream with the FLASHBACK AUDITLOG command. For example, TAB, PLOT, another FLASHBACK LIST, or FLASHBACK AUDITLOG command.

This command has the following syntax:

FLASHBACK AUDITLOG [idoption(identifiers)]

idoption(identifiers): Includes resources specified by identifiers for an ID option. You can specify multiple ID options.

Note: The FLASHBACK AUDITLOG command can generate enormous amounts of output when run against a large input file. To avoid problems, use either the FROM and TO commands, the COUNT command, or the SELECT command to limit the output.

Example: FLASHBACK AUDITLOG Command

The following FLASHBACK AUDITLOG command is specified with the AUDTYPE ID option and identifier. This report shows only Console command records.

FLASHBACK AUDITLOG AUDTYPE(Console command)
END
RUN

A report like the following is generated:

AUDIT SYSTEM SUBSYS JOB TASK SECURITY PRODUCT USER TERMINAL DATE TIME TYPE NAME ID ID NAME GROUP RELEASE ID ID -------- -------- ---------------- -------- -------- -------- -------- -------- -------- -------- -------- 05/29/09 19.59.59 Console command CA31 GSVQ STC05788 SCHEDULR 12.5 GSVXSCHT 05/29/09 19.59.59 Console command CA31 GSVX STC39650 SCHEDULR 12.0 GSVXSCHT 05/29/09 20.00.00 Console command CA31 SYSV STC27561 SCHEDULR 12.5 GSVXSCHT 05/29/09 20.00.00 Console command CA31 GSVQ STC05788 SCHEDULR 12.5 GSVXSCHT 05/29/09 20.00.00 Console command CA31 GSVX STC39650 SCHEDULR 12.0 GSVXSCHT 05/29/09 20.00.00 Console command CA31 SYSV STC27561 SCHEDULR 12.5 GSVXSCHT -------- -------- ---------------- -------- -------- -------- -------- -------- -------- -------- -------- 05/29/09 20.00.00 -------- -------- ---------------- -------- -------- -------- -------- -------- -------------- - --------

More information:

Historical Reports