How to find out when "drop procedure xyz" was executed and by whom?

How to find out when "drop procedure xyz" was executed and by whom? I've Informix 7.30 UC8 on Solaris 2.6. On late Friday, one of the users who has dba privilege on the database has dropped all procedures by mistake and on Monday morning users complained about them. Then those procedures were again created / compiled from the original - saved - SQL. My onstat -l shows that logid 78 was active at that time. So, I looked into onlog -n 78 -t 200011 >>onlog78 Here, 200011 is the decimal value of systables.partnum for sysprocedures and 78 is relevant logid. I found record type HDELETE with tblspace id 200011 with relevant time (7 PM Friday) in onlog78. What would be your approach in this situation to find out the truth? Is there any way to see the actual SQL statement executed? Regards, Nick.

In article <80q4io$2c0$1@news.cnf.com>, Nick Kataria <kataria.nick@emeryworld.com> writes >How to find out when "drop procedure xyz" was executed and by whom? > >I've Informix 7.30 UC8 on Solaris 2.6. On late Friday, one of the users who >has dba privilege on the database has dropped all procedures by mistake and >on Monday morning users complained about them. Then those procedures were >again created / compiled from the original - saved - SQL. > >My onstat -l shows that logid 78 was active at that time. So, I looked into > >onlog -n 78 -t 200011 >>onlog78> >Here, 200011 is the decimal value of systables.partnum for sysprocedures and >78 is relevant logid. > >I found record type HDELETE with tblspace id 200011 with relevant time (7 PM >Friday) in onlog78. > >What would be your approach in this situation to find out the truth? Is >there any way to see the actual SQL statement executed? > Nope, only the logical log records produced by it. Does onlog should show the userid of the user who did it? Check for long listing or verbose option. >Regards, >Nick. > > > > -- David Williams