spouter 发表于 2006-09-21 10:17

请教db2查看日志,追踪被删表问题。

db2有张非系统表，总是被删除。

我想查查是什么时间被那个连接ip删除的，想问问能不能通过日志查到。具体怎么做。
谢谢了！

nuoran 发表于 2006-09-21 10:46

db2默认不记录这个的，开启db2audit

spouter 发表于 2006-09-21 12:13

谢谢，db2audit 没用过。先学习以下

spouter 发表于 2006-09-21 14:48

我开启db2audit 功能在
DB2 审计设置：

审计活动："TRUE "
日志错误："TRUE "
日志成功："FALSE "
日志审查事件："TRUE "
日志检查事件："TRUE "
日志对象维护事件："TRUE "
日志安全性维护事件："TRUE "
日志系统管理员事件："TRUE "
日志验证事件："TRUE "
日志上下文事件："FALSE "
返回关于审查错误的 SQLCA："FALSE "

AUD0000I操作成功。
----------------------------------------------------------------------------------------------------------------------
在14：41建了表A但以下记录，没有记下建立表？请大家指点一下。



timestamp=2006-09-21-14.41.40.890000;category=VALIDATE;audit event=CHECK_GROUP_MEMBERSHIP;
event correlator=2;event status=-1092;
database=RHHRB01;userid=db2admin;authid=DB2ADMIN;execution id=DB2ADMIN;
origin node=0;coordinator node=0;
application id=*LOCAL.DB2.060921064141;application name=DB2HMON;
auth type=NOT_SPEC;plugin name=IBMOSgroups;

timestamp=2006-09-21-14.41.40.890001;category=VALIDATE;audit event=CHECK_GROUP_MEMBERSHIP;
event correlator=2;event status=-1092;
database=RHHRB01;userid=db2admin;authid=DB2ADMIN;execution id=DB2ADMIN;
origin node=0;coordinator node=0;
application id=*LOCAL.DB2.060921064141;application name=DB2HMON;
auth type=NOT_SPEC;plugin name=IBMOSgroups;

timestamp=2006-09-21-14.41.40.890002;category=VALIDATE;audit event=CHECK_GROUP_MEMBERSHIP;
event correlator=2;event status=-1092;
database=RHHRB01;userid=db2admin;authid=DB2ADMIN;execution id=DB2ADMIN;
origin node=0;coordinator node=0;
application id=*LOCAL.DB2.060921064141;application name=DB2HMON;
auth type=NOT_SPEC;plugin name=IBMOSgroups;

timestamp=2006-09-21-14.41.40.921000;category=VALIDATE;audit event=CHECK_GROUP_MEMBERSHIP;
event correlator=2;event status=-1092;
database=RHHRC01;userid=db2admin;authid=DB2ADMIN;execution id=DB2ADMIN;
origin node=0;coordinator node=0;
application id=*LOCAL.DB2.060921064142;application name=DB2HMON;
auth type=NOT_SPEC;plugin name=IBMOSgroups;

timestamp=2006-09-21-14.41.40.921001;category=VALIDATE;audit event=CHECK_GROUP_MEMBERSHIP;
event correlator=2;event status=-1092;
database=RHHRC01;userid=db2admin;authid=DB2ADMIN;execution id=DB2ADMIN;
origin node=0;coordinator node=0;
application id=*LOCAL.DB2.060921064142;application name=DB2HMON;
auth type=NOT_SPEC;plugin name=IBMOSgroups;

timestamp=2006-09-21-14.41.40.921002;category=VALIDATE;audit event=CHECK_GROUP_MEMBERSHIP;
event correlator=2;event status=-1092;
database=RHHRC01;userid=db2admin;authid=DB2ADMIN;execution id=DB2ADMIN;
origin node=0;coordinator node=0;
application id=*LOCAL.DB2.060921064142;application name=DB2HMON;
auth type=NOT_SPEC;plugin name=IBMOSgroups;

nuoran 发表于 2006-09-22 09:45

开启log success。

spouter 发表于 2006-09-22 12:49

nuoran好人，谢谢！！！

nuoran 发表于 2006-09-22 13:27

共同提高，呵呵。

散手小子 发表于 2010-08-15 23:46

我觉得应该是看事物日志吧
页: [1]
查看完整版本: 请教db2查看日志,追踪被删表问题。