ONLOG command

Posted in 2018

Summary

Dirk (IDS 12.10.FC9W1 on AIX) asked for documentation on the onlog utility, hoping to use it to track down an unknown user doing mass loads/updates. Replies noted onlog only formats logical-log records rather than querying them, pointed to the Administrator's Reference and IBM technote swg21661849, and suggested grepping onlog output for the table's partnum then tracing the xid back to the BEGIN WORK record to get the user ID. Another poster recommended onaudit instead, with a warning about its performance cost. No confirmation that Dirk found the culprit.

Auto-generated by DrWatson from the posts below — may be imperfect; read the full thread.

Topics: Versions, Editions & End-of-Life

Dirk Moolman [ MTN South Africa ] — Thu, 22 Feb 2018 14:05:48 — source: IIUG Forums & Mailing Lists

Does anyone have a good link for me, where I can read more about the ONLOG command in detail, more about using it to interrogate logs ? Version 12.10.FC9W1 AIX 1 7 00CC95264C00 Regards Dirk

↪ replying to Dirk Moolman [ MTN South Africa ]

Fernando Nunes — Thu, 22 Feb 2018 14:44:12 — source: IIUG Forums & Mailing Lists

The documentation is in the Database Administrator Reference guide. But it does not "interrogate" logs. It puts the information in a more readable format. Regards. On Thu, Feb 22, 2018 at 3:05 PM, Dirk Moolman [ MTN South Africa ] < Dirk.Moolman@mtn.com> wrote: > Does anyone have a good link for me, where I can read more about the ONLOG > command in detail, more about using it to interrogate logs ? > > Version 12.10.FC9W1 > > AIX 1 7 00CC95264C00 > > Regards > Dirk > > > ************************************************************ > ******************* > Forum Note: Use "Reply" to post a response in the discussion forum. > > -- Fernando Nunes Portugal http://informix-technology.blogspot.com My email works... but I don't check it frequently...

↪ replying to Dirk Moolman [ MTN South Africa ]

R MICHAEL — Thu, 22 Feb 2018 18:11:26 — source: IIUG Forums & Mailing Lists

Hi Dirk, This article should explain everything you want to know: http://www-01.ibm.com/support/docview.wss?uid=swg21661849 Regards, Michael.

↪ replying to Fernando Nunes

Dirk Moolman [ MTN South Africa ] — Mon, 26 Feb 2018 09:47:47 — source: IIUG Forums & Mailing Lists

Yes, thank you. Perhaps interrogate was the wrong word :-) What I'm really looking for, is a user that does mass loads / updates on our DB. Most of the time the DB is quiet, but recently someone started doing mass "updates", and I cannot find the culprit yet. Dirk -----Original Message----- From: ids-bounces@iiug.org [mailto:ids-bounces@iiug.org] On Behalf Of Fernando Nunes Sent: Thursday, 22 February 2018 4:44 PM To: ids@iiug.org Subject: Re: ONLOG command [40742] The documentation is in the Database Administrator Reference guide. But it does not "interrogate" logs. It puts the information in a more readable format. Regards. On Thu, Feb 22, 2018 at 3:05 PM, Dirk Moolman [ MTN South Africa ] < Dirk.Moolman@mtn.com> wrote: > Does anyone have a good link for me, where I can read more about the > ONLOG command in detail, more about using it to interrogate logs ? > > Version 12.10.FC9W1 > > AIX 1 7 00CC95264C00 > > Regards > Dirk > > > ************************************************************ > ******************* > Forum Note: Use "Reply" to post a response in the discussion forum. > > -- Fernando Nunes Portugal http://informix-technology.blogspot.com My email works... but I don't check it frequently... ******************************************************************************* Forum Note: Use "Reply" to post a response in the discussion forum.

↪ replying to R MICHAEL

Dirk Moolman [ MTN South Africa ] — Mon, 26 Feb 2018 11:46:44 — source: IIUG Forums & Mailing Lists

Thank you !! -----Original Message----- From: ids-bounces@iiug.org [mailto:ids-bounces@iiug.org] On Behalf Of R MICHAEL Sent: Thursday, 22 February 2018 8:11 PM To: ids@iiug.org Subject: Re: ONLOG command [40750] Hi Dirk, This article should explain everything you want to know: http://www-01.ibm.com/support/docview.wss?uid=swg21661849 Regards, Michael. ******************************************************************************* Forum Note: Use "Reply" to post a response in the discussion forum.

↪ replying to Dirk Moolman [ MTN South Africa ]

Paul Watson — Mon, 26 Feb 2018 15:23:42 — source: IIUG Forums & Mailing Lists

Assuming you know the partnum then a onlog | grep partnum should give you a good starting point, then backtrace on the xid to the begin work record and the UID -----Original Message----- From: ids-bounces@iiug.org [mailto:ids-bounces@iiug.org] On Behalf Of Dirk Moolman [ MTN South Africa ] Sent: Monday, February 26, 2018 3:48 AM To: ids@iiug.org Subject: RE: ONLOG command [40768] Yes, thank you. Perhaps interrogate was the wrong word :-) What I'm really looking for, is a user that does mass loads / updates on our DB. Most of the time the DB is quiet, but recently someone started doing mass "updates", and I cannot find the culprit yet. Dirk -----Original Message----- From: ids-bounces@iiug.org [mailto:ids-bounces@iiug.org] On Behalf Of Fernando Nunes Sent: Thursday, 22 February 2018 4:44 PM To: ids@iiug.org Subject: Re: ONLOG command [40742] The documentation is in the Database Administrator Reference guide. But it does not "interrogate" logs. It puts the information in a more readable format. Regards. On Thu, Feb 22, 2018 at 3:05 PM, Dirk Moolman [ MTN South Africa ] < Dirk.Moolman@mtn.com> wrote: > Does anyone have a good link for me, where I can read more about the > ONLOG command in detail, more about using it to interrogate logs ? > > Version 12.10.FC9W1 > > AIX 1 7 00CC95264C00 > > Regards > Dirk > > > ************************************************************ > ******************* > Forum Note: Use "Reply" to post a response in the discussion forum. > > -- Fernando Nunes Portugal http://informix-technology.blogspot.com My email works... but I don't check it frequently... **************************************************************************** *** Forum Note: Use "Reply" to post a response in the discussion forum. **************************************************************************** *** Forum Note: Use "Reply" to post a response in the discussion forum.

↪ replying to Dirk Moolman [ MTN South Africa ]

Khaled Bentebal — Mon, 26 Feb 2018 19:20:11 — source: IIUG Forums & Mailing Lists

HI, It seems that what you are looking for the use of ONAUDIT for find who did what. Look at the documentation on how to set it up However onaudit on updates will slow yout performance. Khaled Bentebal Mobile: 33 (0) 6 07 78 41 97 Email: khaled.bentebal@consult-ix.fr Le 26/02/2018 à 10:47, Dirk Moolman [ MTN South Africa ] a écrit : > Yes, thank you. Perhaps interrogate was the wrong word :-) > > What I'm really looking for, is a user that does mass loads / updates on our > DB. Most of the time the DB is quiet, but recently someone started doing mass > "updates", and I cannot find the culprit yet. > > Dirk > > -----Original Message----- > From: ids-bounces@iiug.org [mailto:ids-bounces@iiug.org] On Behalf Of Fernando > Nunes > Sent: Thursday, 22 February 2018 4:44 PM > To: ids@iiug.org > Subject: Re: ONLOG command [40742] > > The documentation is in the Database Administrator Reference guide. > But it does not "interrogate" logs. It puts the information in a more readable > format. > > Regards. > > On Thu, Feb 22, 2018 at 3:05 PM, Dirk Moolman [ MTN South Africa ] < > Dirk.Moolman@mtn.com> wrote: > >> Does anyone have a good link for me, where I can read more about the >> ONLOG command in detail, more about using it to interrogate logs ? >> >> Version 12.10.FC9W1 >> >> AIX 1 7 00CC95264C00 >> >> Regards >> Dirk >> >> >> ************************************************************ >> ******************* >> Forum Note: Use "Reply" to post a response in the discussion forum. >> >>