Home | Previous Page | Next Page   Audit Analysis >

Audit-Record Format

The format for database server audit records has the following parts:

Dynamic Server

Table 4 shows the format of the database server audit records for Dynamic Server.

Table 4. Audit-Record Format for Dynamic Server
ONLN date and time hostname or
hostname.
domain.ext
pid database
server
name
user
name
errno event
mnemonic
Additional
Fields
ONLN 1998-07-28 15:43:00.000 turk 4549 khan jazt 0 CRDB dbsch
ONLN 1998-07-28 15:43:18.000 turk 4549 khan jazt 0 ACTB dbsch:jazt:v1:103
ONLN 1998-07-28 15:43:19.000 turk 4549 khan jazt 0 CLDB dbsh
ONLN 1998-07-28 15:43:21.000 turk 4549 khan jazt 0 ALFR
local:109:-:-:4:4:
db1,db2,db3,
rootdbs
ONLN 1998-07-28 15:43:28.000 turk 4549 khan jazt 0 ALFR
local:109:aa5x:-:
32:4: db1,db2
ONLN 1998-07-28 15:43:29.000 turk 4549 khan jazt 0 STDS 2:-
ONLN 1998-07-28 15:43:29.000 turk 4549 khan jazt 0 STPR 100
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
ONLN
A fixed field used to identify Dynamic Server events
date and time
Indicates when the audit event was recorded
hostname
The name of the UNIX host computer of the client application that executes the audit event
hostname.domain.ext
The name of the Windows host computer, domain, and extension of the client application that executes the audit event
pid
The process ID of the client application that causes the database server to execute the audit event
database server name
The name of the database server on which the audit event is executed
user name
The login name of the user who requests the event
errno
The event result that contains the error number that the event returns, indicating success (0) or failure
event mnemonic
Database server audit event that the database server executed, such as ALFR (Alter Fragment)
additional fields
Any fields that identify databases, tables, and so on. These additional fields are audit-event fields that contain information captured in tabular form by the onshowaudit utility for audit analysis.

For operating-system-managed auditing on UNIX, the database server audit record is an additional field for the operating-system audit record. Appendix A. Audit Events lists the audit-event fields.

End of Dynamic Server
Extended Parallel Server

For Extended Parallel Server, audit records appear in the format shown in Table 5.

Table 5. Audit-Record Format for Extended Parallel Server
XPS coserver
id
datetime host
name
PID database server name username errno event
mnemonic
additional fields
xps 2
2000-01-29
03:23:51.000
smart 1752 dragon sunny 0 ONST -
xps 2
2000-01-29
03:23:53.000
smart 1754 dragon sunny 0 STSN
xps 2
2000-01-29
03:23:53.000
smart 1754 dragon sunny 0 OPDB
sysmaster:
0:-
XPS 2
2000-01-29
03:23:53.000
smart 1754 dragon sunny 0 CLDB sysmaster
XPS 2
2000-01-29
03:24:44.000
smart 964 dragon sunny 0 ONST -
XPS 2
2000-01-29
03:24:46.000
smart 964 dragon sunny 0 ONST -d
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.

The output for Extended Parallel Server includes the following fields that are different from the output for Dynamic Server:

XPS
A fixed field that identifies Extended Parallel Server events
coserver id
The number of the coserver where the event occurred
End of Extended Parallel Server
Home | [ Top of Page | Previous Page | Next Page | Contents | Index ]