Appendix. Fields on the Data Management History panel

This appendix describes different fields in operation summary, import operation, and prune operation on the Data Management History panel.

Operation summary fields shows the operation summary fields for views on the Data Management History panel.
Table 1. Operation summary fields
Field name Description
Submitted The date and time when the operation was submitted for execution.
Operation

Type of operation performed.

Possible operation values are Import and Prune.

When the value is Import, the Operation field also contains the name of the data set of SMF records that was used for the import operation.

When the value is Prune, the Operation field also contains the type of prune operation performed. Possible values are:
  • All Data, when the prune operation removed all SMF records from the database.
  • Relative prune, when the prune operation removes a subset of SMF records with creation dates older than an interval relative to the date when the operation is submitted.
  • Custom date range, when the prune operation removes a subset of SMF records associated with a custom time interval.
Status The status of the data management operation. Possible values are:
  • Active, when the operation is currently executing.
  • Canceled, when the operation was stopped before completion by the user.
  • Complete, when the operation finished successfully.
  • Failed, when the operation did not complete successfully.
  • Pending, when the operation has been submitted but is awaiting execution.
Start time One of the following:
  • If the operation has started execution, has completed execution, or has failed execution, this field indicates the date and time when the operation started.
  • If the operation was canceled prior to execution, this field indicates Canceled.
  • If the job is still awaiting execution, this field indicates Pending.
End time One of the following:
  • If the operation completed successfully, the date and time when the operation completed.
  • If the operation is still executing, this field indicates Active.
  • If the operation was canceled prior to starting execution, this field indicates Canceled.
  • If the operation failed execution, this field indicates Failed.
  • If the operation has been submitted but is awaiting execution, this field indicates Pending.
Import operation details shows the import operation detail fields for views on the Data Management History panel.
Table 2. Import operation details.

The table includes two columns of Field name and Description. This table shows the import operation detail for views on the Data Management History panel in IBM zERT Network Analyzer.
Field name Description
Error message

Error message generated when the import operation was unsuccessful.

Note: This information is only displayed when Status value is Failed or Canceled.
Data set name Name of the data set containing SMF records that was used in the import operation, plus any comment that the user included when submitting the import operation.
User Name of the IBM zERT Network Analyzer user that initiated the import operation.
Number of records added Count of the number of zERT aggregation summary interval SMF records successfully added to the database. zERT aggregation summary interval records are SMF type 119, subtype 12 records with an event type value equal to 'summary interval'.
Number of duplicate records Count of the number of imported SMF records that were duplicates of existing records in the database
Number of records ignored Count of the number of SMF records that were present in the data set but which were not added to the database because they were not zERT aggregation summary interval SMF records. zERT aggregation summary interval records are SMF type 119, subtype 12 records with an event type value equal to 'summary interval'.
Earliest record imported SMF record timestamp associated with the oldest SMF record added to the database by this operation, or "N/A" if no records were imported as part of this operation.
Latest record imported SMF record timestamp associated with the youngest SMF record added to the database by this operation, or "N/A" if no records were imported as part of this operation.
Prune operation details shows the prune operation detail fields for views on the Data Management History panel.
Table 3. Prune operation details.

The table includes two columns of Field name and Description. This table shows the prune operation detail for views on the Data Management History panel in IBM zERT Network Analyzer.
Field name Description
Error message

Error message generated when the prune operation was unsuccessful.

Note: This information is only displayed when Status value is Failed or Canceled.
Operation type The type of prune operation performed, plus any comment that the user included when submitting the prune operation. Possible values are:
  • All imported data removed from zERT, when the prune operation removed all SMF records from the database.
  • Relative prune: Older than number days, when the prune operation removes a subset of SMF records with creation dates older than an interval relative to the date when the operation is submitted. The value for number indicates the number of days in the relative interval.
  • Custom date range: start date to end date, when the prune operation removes a subset of SMF records associated with a custom time interval. The displayed as start date represents the oldest date for the custom interval, and the date displayed as end date represents the youngest date for the custom interval.
User Name of the IBM zERT Network Analyzer user that initiated the prune operation.
Number of session records pruned Count of the number of session records successfully removed from the IBM zERT Network Analyzer database by this operation.
Note: Session records contain the endpoint and cryptographic details about security sessions. There is one set of session records for each individual security session. Session statistics records contain the per-SMF interval statistics (counts of connections, bytes in/out, segments in/out, etc.) for each security session. There are typically many session statistics records (one per represented SMF interval) for an individual security session.
Number of session statistics records pruned Count of the number of session statistics records successfully removed from the IBM zERT Network Analyzer database by this operation.
Earliest record pruned SMF record timestamp associated with the oldest SMF record pruned by this operation, or "N/A" if no records were pruned as part of this operation.
Latest record pruned SMF record timestamp associated with the newest SMF record pruned by this operation, or "N/A" if no records were pruned as part of this operation.