AUDIT TRACE

Leila Hosseini

AUDIT TRACE
Hi dear Listers
We have db2 V6 on os/390,I have started trace AUDIT
class 4,5 and destination is SMF,then i extract types
100;102 from SMF.After that I terse them,now I have FB
dataset WHICH i can browse it,but really there was no
information for me .I know,i should FTP this file to
DB2 level 2 site.
Is there any way to extract 100:102 type from SMF
which could be useful?
Another question is this:what is the aim of this
process,gathering in SMF,extract,terse and FTP?
Why last program isn't available?
Thanks in Advance.
L.S.Hosseini.
DB2 Admin.


____________________________________________________________________________________
Be a better friend, newshound, and
know-it-all with Yahoo! Mobile. Try it now. http://mobile.yahoo.com/;_ylt=Ahu06i62sR8HDtDypao8Wcj9tAcJ

The IDUG DB2-L Listserv is only part of your membership in IDUG. DB2-L list archives, the FAQ, and delivery preferences are at http://www.idug.org/lsidug under the Listserv tab. While at the site, you can also access the IDUG Online Learning Center, Tech Library and Code Place, see the latest IDUG conference information, and much more. If you have not yet signed up for Basic Membership in IDUG, available at no cost, click on Member Services at http://www.idug.org/lsms

James Campbell

Re: AUDIT TRACE
(in response to Leila Hosseini)
Most of the standard monitors include utilities to print a formatted report. Alternatively you
can write your own code: The Administration Guide has an appendix which discusses the
format of the DB2 information (how the data segements are put together and the pointers to
them), and there are macros which detail the format of of the data segments, depending on
the IFCID record type. There's not much point in browsing a tersed file - unless you are
better at visual de-compression than I am: Use the VB extract file.

Normally I only send stuff to level 2 if I have a problem. Do you? If you are running V6, you
might get an "out of support" response.

James Campbell

On 21 Jan 2008 at 21:17, Laila hosaini wrote:

> Hi dear Listers
> We have db2 V6 on os/390,I have started trace AUDIT
> class 4,5 and destination is SMF,then i extract types
> 100;102 from SMF.After that I terse them,now I have FB
> dataset WHICH i can browse it,but really there was no
> information for me .I know,i should FTP this file to
> DB2 level 2 site.
> Is there any way to extract 100:102 type from SMF
> which could be useful?
> Another question is this:what is the aim of this
> process,gathering in SMF,extract,terse and FTP?
> Why last program isn't available?
> Thanks in Advance.
> L.S.Hosseini.
> DB2 Admin.

The IDUG DB2-L Listserv is only part of your membership in IDUG. DB2-L list archives, the FAQ, and delivery preferences are at http://www.idug.org/lsidug under the Listserv tab. While at the site, you can also access the IDUG Online Learning Center, Tech Library and Code Place, see the latest IDUG conference information, and much more. If you have not yet signed up for Basic Membership in IDUG, available at no cost, click on Member Services at http://www.idug.org/lsms

Leila Hosseini

Re: AUDIT TRACE
(in response to James Campbell)
Thanks because of your answer ,what is "VB extract
file" ?.please guide more.
L.S.Hosseini
--- [login to unmask email] wrote:

> Most of the standard monitors include utilities to
> print a formatted report. Alternatively you
> can write your own code: The Administration Guide
> has an appendix which discusses the
> format of the DB2 information (how the data
> segements are put together and the pointers to
> them), and there are macros which detail the format
> of of the data segments, depending on
> the IFCID record type. There's not much point in
> browsing a tersed file - unless you are
> better at visual de-compression than I am: Use the
> VB extract file.
>
> Normally I only send stuff to level 2 if I have a
> problem. Do you? If you are running V6, you
> might get an "out of support" response.
>
> James Campbell
>
> On 21 Jan 2008 at 21:17, Laila hosaini wrote:
>
> > Hi dear Listers
> > We have db2 V6 on os/390,I have started trace
> AUDIT
> > class 4,5 and destination is SMF,then i extract
> types
> > 100;102 from SMF.After that I terse them,now I
> have FB
> > dataset WHICH i can browse it,but really there was
> no
> > information for me .I know,i should FTP this file
> to
> > DB2 level 2 site.
> > Is there any way to extract 100:102 type from SMF
> > which could be useful?
> > Another question is this:what is the aim of this
> > process,gathering in SMF,extract,terse and FTP?
> > Why last program isn't available?
> > Thanks in Advance.
> > L.S.Hosseini.
> > DB2 Admin.
>
> The IDUG DB2-L Listserv is only part of your
> membership in IDUG. DB2-L list archives, the FAQ,
> and delivery preferences are at
> http://www.idug.org/lsidug under the Listserv tab.
> While at the site, you can also access the IDUG
> Online Learning Center, Tech Library and Code Place,
> see the latest IDUG conference information, and much
> more. If you have not yet signed up for Basic
> Membership in IDUG, available at no cost, click on
> Member Services at http://www.idug.org/lsms
>



____________________________________________________________________________________
Never miss a thing. Make Yahoo your home page.
http://www.yahoo.com/r/hs

The IDUG DB2-L Listserv is only part of your membership in IDUG. DB2-L list archives, the FAQ, and delivery preferences are at http://www.idug.org/lsidug under the Listserv tab. While at the site, you can also access the IDUG Online Learning Center, Tech Library and Code Place, see the latest IDUG conference information, and much more. If you have not yet signed up for Basic Membership in IDUG, available at no cost, click on Member Services at http://www.idug.org/lsms

James Campbell

Re: AUDIT TRACE
(in response to Leila Hosseini)
You wrote, in your initial email:
> I have started trace AUDIT class 4,5 and destination is SMF,then i extract
> types 100;102 from SMF
You now have an extract file which is in VB (variable blocked) format

James Campbell

On 22 Jan 2008 at 2:20, Laila hosaini wrote:

> Thanks because of your answer ,what is "VB extract
> file" ?.please guide more.
> L.S.Hosseini
> --- [login to unmask email] wrote:
>
> > Most of the standard monitors include utilities to
> > print a formatted report. Alternatively you
> > can write your own code: The Administration Guide
> > has an appendix which discusses the
> > format of the DB2 information (how the data
> > segements are put together and the pointers to
> > them), and there are macros which detail the format
> > of of the data segments, depending on
> > the IFCID record type. There's not much point in
> > browsing a tersed file - unless you are
> > better at visual de-compression than I am: Use the
> > VB extract file.
> >
> > Normally I only send stuff to level 2 if I have a
> > problem. Do you? If you are running V6, you
> > might get an "out of support" response.
> >
> > James Campbell
> >
> > On 21 Jan 2008 at 21:17, Laila hosaini wrote:
> >
> > > Hi dear Listers
> > > We have db2 V6 on os/390,I have started trace
> > AUDIT
> > > class 4,5 and destination is SMF,then i extract
> > types
> > > 100;102 from SMF.After that I terse them,now I
> > have FB
> > > dataset WHICH i can browse it,but really there was
> > no
> > > information for me .I know,i should FTP this file
> > to
> > > DB2 level 2 site.
> > > Is there any way to extract 100:102 type from SMF
> > > which could be useful?
> > > Another question is this:what is the aim of this
> > > process,gathering in SMF,extract,terse and FTP?
> > > Why last program isn't available?
> > > Thanks in Advance.
> > > L.S.Hosseini.
> > > DB2 Admin.
> >
> > The IDUG DB2-L Listserv is only part of your
> > membership in IDUG. DB2-L list archives, the FAQ,
> > and delivery preferences are at
> > http://www.idug.org/lsidug under the Listserv tab.
> > While at the site, you can also access the IDUG
> > Online Learning Center, Tech Library and Code Place,
> > see the latest IDUG conference information, and much
> > more. If you have not yet signed up for Basic
> > Membership in IDUG, available at no cost, click on
> > Member Services at http://www.idug.org/lsms
> >
>
>
>
> ____________________________________________________________________________________
> Never miss a thing. Make Yahoo your home page.
> http://www.yahoo.com/r/hs
>
> The IDUG DB2-L Listserv is only part of your membership in IDUG. DB2-L list archives, the FAQ, and delivery preferences are at http://www.idug.org/lsidug under the Listserv tab. While at the site, you can also access the IDUG Online Learning Center, Tech Library and Code Place, see the latest IDUG conference information, and much more. If you have not yet signed up for Basic Membership in IDUG, available at no cost, click on Member Services at http://www.idug.org/lsms

The IDUG DB2-L Listserv is only part of your membership in IDUG. DB2-L list archives, the FAQ, and delivery preferences are at http://www.idug.org/lsidug under the Listserv tab. While at the site, you can also access the IDUG Online Learning Center, Tech Library and Code Place, see the latest IDUG conference information, and much more. If you have not yet signed up for Basic Membership in IDUG, available at no cost, click on Member Services at http://www.idug.org/lsms

Leila Hosseini

Re: AUDIT TRACE
(in response to James Campbell)
Hi ,and thanks for your reply,what is
visual de-compression?...I don't know any thing about
visual de-compression???
L.S.H

--- [login to unmask email] wrote:

> You wrote, in your initial email:
> > I have started trace AUDIT class 4,5 and
> destination is SMF,then i extract
> > types 100;102 from SMF
> You now have an extract file which is in VB
> (variable blocked) format
>
> James Campbell
>
> On 22 Jan 2008 at 2:20, Laila hosaini wrote:
>
> > Thanks because of your answer ,what is "VB extract
> > file" ?.please guide more.
> > L.S.Hosseini
> > --- [login to unmask email] wrote:
> >
> > > Most of the standard monitors include utilities
> to
> > > print a formatted report. Alternatively you
> > > can write your own code: The Administration
> Guide
> > > has an appendix which discusses the
> > > format of the DB2 information (how the data
> > > segements are put together and the pointers to
> > > them), and there are macros which detail the
> format
> > > of of the data segments, depending on
> > > the IFCID record type. There's not much point
> in
> > > browsing a tersed file - unless you are
> > > better at visual de-compression than I am: Use
> the
> > > VB extract file.
> > >
> > > Normally I only send stuff to level 2 if I have
> a
> > > problem. Do you? If you are running V6, you
> > > might get an "out of support" response.
> > >
> > > James Campbell
> > >
> > > On 21 Jan 2008 at 21:17, Laila hosaini wrote:
> > >
> > > > Hi dear Listers
> > > > We have db2 V6 on os/390,I have started trace
> > > AUDIT
> > > > class 4,5 and destination is SMF,then i
> extract
> > > types
> > > > 100;102 from SMF.After that I terse them,now I
> > > have FB
> > > > dataset WHICH i can browse it,but really there
> was
> > > no
> > > > information for me .I know,i should FTP this
> file
> > > to
> > > > DB2 level 2 site.
> > > > Is there any way to extract 100:102 type from
> SMF
> > > > which could be useful?
> > > > Another question is this:what is the aim of
> this
> > > > process,gathering in SMF,extract,terse and
> FTP?
> > > > Why last program isn't available?
> > > > Thanks in Advance.
> > > > L.S.Hosseini.
> > > > DB2 Admin.
> > >
> > > The IDUG DB2-L Listserv is only part of your
> > > membership in IDUG. DB2-L list archives, the
> FAQ,
> > > and delivery preferences are at
> > > http://www.idug.org/lsidug under the Listserv
> tab.
> > > While at the site, you can also access the IDUG
> > > Online Learning Center, Tech Library and Code
> Place,
> > > see the latest IDUG conference information, and
> much
> > > more. If you have not yet signed up for Basic
> > > Membership in IDUG, available at no cost, click
> on
> > > Member Services at http://www.idug.org/lsms
> > >
> >
> >
> >
> >
>
____________________________________________________________________________________
> > Never miss a thing. Make Yahoo your home page.
> > http://www.yahoo.com/r/hs
> >
> > The IDUG DB2-L Listserv is only part of your
> membership in IDUG. DB2-L list archives, the FAQ,
> and delivery preferences are at
> http://www.idug.org/lsidug under the Listserv tab.
> While at the site, you can also access the IDUG
> Online Learning Center, Tech Library and Code Place,
> see the latest IDUG conference information, and much
> more. If you have not yet signed up for Basic
> Membership in IDUG, available at no cost, click on
> Member Services at http://www.idug.org/lsms
>
> The IDUG DB2-L Listserv is only part of your
> membership in IDUG. DB2-L list archives, the FAQ,
> and delivery preferences are at
> http://www.idug.org/lsidug under the Listserv tab.
> While at the site, you can also access the IDUG
> Online Learning Center, Tech Library and Code Place,
> see the latest IDUG conference information, and much
> more. If you have not yet signed up for Basic
> Membership in IDUG, available at no cost, click on
> Member Services at http://www.idug.org/lsms
>



____________________________________________________________________________________
Never miss a thing. Make Yahoo your home page.
http://www.yahoo.com/r/hs

The IDUG DB2-L Listserv is only part of your membership in IDUG. DB2-L list archives, the FAQ, and delivery preferences are at http://www.idug.org/lsidug under the Listserv tab. While at the site, you can also access the IDUG Online Learning Center, Tech Library and Code Place, see the latest IDUG conference information, and much more. If you have not yet signed up for Basic Membership in IDUG, available at no cost, click on Member Services at http://www.idug.org/lsms

James Campbell

Re: AUDIT TRACE
(in response to Leila Hosseini)
Visual de-compression occurs when you can de-compress a file by reading (with your eyes)
the de-compression keys and the compressed file and mentally using the keys to de-
compress the file.

And, no, I don't know anyone who can. I was making the point that trying to make sense of a
compressed file (without de-compressing it first) is not an something I would attempt.

James Campbell

On 25 Jan 2008 at 21:48, Laila hosaini wrote:

> Hi ,and thanks for your reply,what is
> visual de-compression?...I don't know any thing about
> visual de-compression???
> L.S.H
>
> --- [login to unmask email] wrote:
>
> > You wrote, in your initial email:
> > > I have started trace AUDIT class 4,5 and
> > destination is SMF,then i extract
> > > types 100;102 from SMF
> > You now have an extract file which is in VB
> > (variable blocked) format
> >
> > James Campbell
> >
> > On 22 Jan 2008 at 2:20, Laila hosaini wrote:
> >
> > > Thanks because of your answer ,what is "VB extract
> > > file" ?.please guide more.
> > > L.S.Hosseini
> > > --- [login to unmask email] wrote:
> > >
> > > > Most of the standard monitors include utilities
> > to
> > > > print a formatted report. Alternatively you
> > > > can write your own code: The Administration
> > Guide
> > > > has an appendix which discusses the
> > > > format of the DB2 information (how the data
> > > > segements are put together and the pointers to
> > > > them), and there are macros which detail the
> > format
> > > > of of the data segments, depending on
> > > > the IFCID record type. There's not much point
> > in
> > > > browsing a tersed file - unless you are
> > > > better at visual de-compression than I am: Use
> > the
> > > > VB extract file.
> > > >
> > > > Normally I only send stuff to level 2 if I have
> > a
> > > > problem. Do you? If you are running V6, you
> > > > might get an "out of support" response.
> > > >
> > > > James Campbell
> > > >
> > > > On 21 Jan 2008 at 21:17, Laila hosaini wrote:
> > > >
> > > > > Hi dear Listers
> > > > > We have db2 V6 on os/390,I have started trace
> > > > AUDIT
> > > > > class 4,5 and destination is SMF,then i
> > extract
> > > > types
> > > > > 100;102 from SMF.After that I terse them,now I
> > > > have FB
> > > > > dataset WHICH i can browse it,but really there
> > was
> > > > no
> > > > > information for me .I know,i should FTP this
> > file
> > > > to
> > > > > DB2 level 2 site.
> > > > > Is there any way to extract 100:102 type from
> > SMF
> > > > > which could be useful?
> > > > > Another question is this:what is the aim of
> > this
> > > > > process,gathering in SMF,extract,terse and
> > FTP?
> > > > > Why last program isn't available?
> > > > > Thanks in Advance.
> > > > > L.S.Hosseini.
> > > > > DB2 Admin.
> > > >

The IDUG DB2-L Listserv is only part of your membership in IDUG. DB2-L list archives, the FAQ, and delivery preferences are at http://www.idug.org/lsidug under the Listserv tab. While at the site, you can also access the IDUG Online Learning Center, Tech Library and Code Place, see the latest IDUG conference information, and much more. If you have not yet signed up for Basic Membership in IDUG, available at no cost, click on Member Services at http://www.idug.org/lsms