AUDIT_JOURNAL_VP (Network Password Error) table function

The AUDIT_JOURNAL_VP table function returns rows from the audit journal that contain information from the VP (Network Password Error) journal entries.

Every audit journal table function shares a common authorization requirement and a common set of parameters. These are described in AUDIT JOURNAL table function common information.

The result of the function is a table containing rows with the format shown in the following table. All the columns are nullable.

Table 1. AUDIT_JOURNAL_VP table function
Column Name	Data Type	Description
The first columns returned by this table function are from the common audit journal entry header. See Common columns returned from the audit journal entry header for the column definitions. After the common columns are the following columns that describe the entry specific data for the VP audit journal entry.
ENTRY_TYPE	CHAR(1)	The type of entry. A Authorization list (AUTL) permission failure D NetServer user disabled P Password error
ENTRY_TYPE_DETAIL	VARCHAR(200)	Descriptive text that corresponds to the entry type.
SERVER_NAME	VARCHAR(10)	The name of the network server description that registered the event. Can contain the special value *NETSERVER.
SERVER_TIMESTAMP	TIMESTAMP(0)	The date and time when the event was logged on the network server.
AUDIT_USER_ NAME	VARCHAR(10)	The name of the user.
COMPUTER_NAME	VARCHAR(45)	The name or IP address of the computer initiating the request. Contains the null value if ENTRY_TYPE is not A.
SHARE_AUTHORIZATION_LIST	VARCHAR(10)	The name of the authorization list assigned to the file share or server. Contains the null value if ENTRY_TYPE is not A.
SHARE_NAME	VARCHAR(12)	The name of the share. If the action is scoped to the server instead of a shared resource, this value will be *SERVER. Contains the null value if ENTRY_TYPE is not A.

Example

Review the Network Server password failures, by day and by server name


SELECT DATE(ENTRY_TIMESTAMP) AS "DATE", SERVER_NAME, 
       COUNT(*) AS NETWORK_SERVER_PASSWORD_ERROR_COUNT
  FROM TABLE (
      SYSTOOLS.AUDIT_JOURNAL_VP(STARTING_TIMESTAMP => CURRENT TIMESTAMP - 7 DAYS)
    )
  GROUP BY DATE(ENTRY_TIMESTAMP), SERVER_NAME
  ORDER BY "DATE", NETWORK_SERVER_PASSWORD_ERROR_COUNT DESC;