dbtran and extracting login audit data

[Former Member]

Hello, I am trying to set up login auditing on IQ15.2 and 16 servers. I can set it up easily enough, but I am having trouble using dbtran to extract only the login audit information, I keep getting enormous output full of transactions. How do I use dbtran to extract only the login audit data?

Thanks,

[c_baker]

What about using the -zr server option to log the connects/disconnects to the .iqmsg file or a log file specified by -zo option?

You can then use the sa_get_request_profile and sa_get_request_times and the associated satmp_request_profile and satmp_request_time tables to analyze the requests.

Chris

[saroj_bagai]

You can't just extract auditing records,  but you can use -d and -g switches with dbtran for auditing records

-d

Specifies that transactions are written in order from earliest to latest. This

feature is intended for auditing database activity: do not apply dbtran output against a database

-g :

Adds auditing information to the transaction log if the auditing database option

is turned on.

SyBooks Online

Thanks

[Former Member]

Thanks, I have tried this:

dbtran -g -d -c "uid=xxx;pwd=xxx;DSN=MYDB;eng=MYDB;dbn=MYDB" -nMYDB_audit.txt

And I am getting an enormous file which is not very workable. I miss the sybsecurity database I have in ASE.

[saroj_bagai]

Are you running against running server,  output will depend on size of your transaction log. you can specify -j to retrict transaction from the last checkpoint

-j date/time

Translates only transactions from the most recent checkpoint prior to the given date or time. The user-provided argument can be a date, time, or date and time, enclosed in quotes. you omit a time, the default is 00:00. If you omit a date, the current day is the default. The acceptable format for the date and time is: "YYYY/MMM/DD HH:NN".

Message was edited by: Saroj Bagai