AUDIT TRACE field (AUDITST subsystem parameter)
The AUDITST parameter controls whether the audit trace is to start automatically when Db2 is started. You can specify the classes for which the audit trace is to start.
| Acceptable values: | NO, YES, list of classes, * (asterisk) |
|---|---|
| Default: | NO |
| Update: | option 23 on panel DSNTIPB |
| DSNZPxxx: | DSN6SYSP AUDITST |
| Security parameter: | Security-related |
The AUDIT TRACE field is scrollable. To scroll the field, position your cursor in the field and use the for LEFT or RIGHT scroll commands. To see the entire contents of the field at one time, type EXPAND in the command field, position your cursor in the scrollable field, and press Enter.
- NO
- Audit trace is not started automatically. If the audit trace is to be used, it must be started with the START TRACE command. NO is the default value.
- YES
- The trace for audit class 1 starts whenever Db2 is started.
- list of classes
- The audit trace for the specified classes starts whenever Db2 is started. To specify classes, list the numbers (any integer in the range 1–32) separated by commas. For a list of defined audit classes, see Db2 audit trace.
- * (asterisk)
- The audit trace starts for all classes whenever Db2 is started.
Note: This is a security-related parameter. Audit traces
should be enabled to collect information about Db2 security
controls to ensure that data access is allowed only for authorized
users.
Recommendation: Either AUDITST or audit policies should be enabled at Db2 startup.