Start of change

AUDIT_JOURNAL_DO table function

The AUDIT_JOURNAL_DO table function returns rows from the audit journal that contain information from the DO (Delete Operation) journal entries.

Every audit journal table function shares a common authorization requirement and a common set of parameters. These are described in AUDIT JOURNAL table function common information.

The result of the function is a table containing rows with the format shown in the following table. All the columns are nullable.

Table 1. AUDIT_JOURNAL_DO table function
Column Name Data Type Description
The first columns returned by this table function are from the common audit journal entry header. See Common columns returned from the audit journal entry header for the column definitions. After the common columns are the following columns that describe the entry specific data for the DO audit journal entry.
ENTRY_TYPE CHAR(1) The type of entry.
A
Object was deleted (not under commitment control)
C
A pending object delete was committed
D
A pending object create was rolled back
P
The object delete is pending (the delete was performed under commitment control)
R
A pending object delete was rolled back
ENTRY_TYPE_DETAIL VARCHAR(200) Descriptive text that corresponds to the entry type.
OBJECT_LIBRARY VARCHAR(10) The name of the library containing the object.

Contains the null value if there is no library name.
OBJECT_NAME VARCHAR(10) The name of the object.

Contains the null value if there is no object name.
OBJECT_TYPE VARCHAR(7) The type of the object.

Contains the null value if there is no object type.
OBJECT_ATTRIBUTE VARCHAR(10) The attribute for the object type.

Contains the null value if there is no object attribute.
OBJECT_ASP_NAME VARCHAR(10) The name of the auxiliary storage pool (ASP) in which the object resides. A value of *SYSBAS indicates the system ASP and all basic user ASPs.
OBJECT_ASP_NUMBER INTEGER The number of the ASP device.
PATH_NAME VARGRAPHIC(5000) CCSID 1200 The path name of the object.

Contains the null value if the object name is not available or the object is not in the "root" (/), QOpenSys, or user-defined file systems.
PATH_NAME_INDICATOR VARCHAR(3) Path name indicator.
NO
The PATH_NAME column does not contain an absolute path name for the object, instead it contains a relative path name. The RELATIVE_DIRECTORY_FILE_ID can be used to form an absolute path name with this relative path name.
YES
The PATH_NAME column contains complete absolute path name for the object.

Contains the null value if the object is not in the "root" (/), QOpenSys, or user-defined file systems.
RELATIVE_DIRECTORY_FILE_ID BINARY(16) When PATH_NAME_INDICATOR is NO, contains the file ID of the directory that contains the object identified in the PATH_NAME column.

Contains the null value when PATH_NAME_INDICATOR is YES, or if the file ID is not available or the object is not in the "root" (/), QOpenSys, or user-defined file systems.
IFS_OBJECT_NAME VARGRAPHIC(512) CCSID 1200 The name of the object.

Contains the null value if the object name is not available or the object is not in the "root" (/), QOpenSys, or user-defined file systems.
OBJECT_FILE_ID BINARY(16) The file ID of the object.

Contains the null value if the object is not in the "root" (/), QOpenSys, or user-defined file systems.
PARENT_FILE_ID BINARY(16) The file ID of the parent directory.

Contains the null value if the file ID is not available or the object is not in the "root" (/), QOpenSys, or user-defined file systems.
OFFICE_USER VARCHAR(10) The name of the office user.

Contains the null value if there is no office user.
OFFICE_ON_BEHALF_OF_USER VARCHAR(10) User working on behalf of another user.

Contains the null value if the user name is not available.
DLO_NAME VARCHAR(12) The name of the document library object.

Contains the null value if there is no document library object.
FOLDER_PATH VARCHAR(63) The path of the folder.

Contains the null value if there is no folder path.

Example

  • List any *FILE objects that were deleted this week. Return the user profile in effect when the delete occurred.
    
SELECT OBJECT_LIBRARY, OBJECT_NAME, USER_NAME FROM TABLE(
  SYSTOOLS.AUDIT_JOURNAL_DO(  
      STARTING_TIMESTAMP => CURRENT TIMESTAMP - 7 DAYS
  )
) WHERE OBJECT_TYPE = '*FILE';
End of change