Home | Previous Page | Next Page   Audit Analysis > Audit Analysis with SQL >

Interpreting Data Extracted from Audit Records

When you create a database table to contain audit records that you extract from audit files, you provide a column for each field in the audit record. Figure 13 lists recommended column names that are used in Figure 9 and Figure 10 and describes the information that each column contains.

Figure 13. Audit-Event Columns in Database Table for SQL Access
Column Name
Description
adttag
ONLN or XPS, depending on the database server
cosvr_id
The number of the coserver on which the audited event occurred (XPS only)
date_time
The date and time of the audited event
hostname
The database servername
pid
The process ID
server
The database server name
username
The username associated with the audited event
errno
The error number, if any
code
The error code, if any
dbname
The name of the database
tabid
The ID number of the affected table
objname
The index name and the table name, or similar identifier (Not in audit tables created with Informix database servers prior to Version 7.0)
extra_1
Information specific to the object and event, as shown in Audit-Event Fields
partno
Fragmentation information (Not in audit tables created with Informix database servers prior to Version 7.0)
row_num
The physical row number in the affected table, which combines the row ID and the old row ID and identifies each row for the events Read Row (RDRW), Insert Row (INRW), Update Current Row (UPRW), and Delete Row (DLRW)
login
The user login name
flags
The flag set for the event, as shown in Audit-Event Fields
extra_2
Information determined by the flag. For examples, see Audit Record Output Sample for Extended Parallel Server.
Home | [ Top of Page | Previous Page | Next Page | Contents | Index ]