AUDIT_JOURNAL_OR (Object Restore) table function

The AUDIT_JOURNAL_OR table function returns rows from the audit journal that contain information from the OR (Object Restore) journal entries.

Every audit journal table function shares a common authorization requirement and a common set of parameters. These are described in AUDIT JOURNAL table function common information.

The result of the function is a table containing rows with the format shown in the following table. All the columns are nullable.

Table 1. AUDIT_JOURNAL_OR table function
Column Name	Data Type	Description
The first columns returned by this table function are from the common audit journal entry header. See Common columns returned from the audit journal entry header for the column definitions. After the common columns are the following columns that describe the entry specific data for the OR audit journal entry.
ENTRY_TYPE	CHAR(1)	The type of entry. E An existing object was restored to the system. N A new object was restored to the system.
ENTRY_TYPE_DETAIL	VARCHAR(200)	Descriptive text that corresponds to the entry type.
OBJECT_LIBRARY	VARCHAR(10)	The name of the library containing the restored object. Contains the null value if there is no library name.
OBJECT_NAME	VARCHAR(10)	The name of the restored object. Contains the null value if there is no object name.
OBJECT_TYPE	VARCHAR(7)	The type of object. Contains the null value if there is no object type.
OBJECT_ATTRIBUTE	VARCHAR(10)	The attribute of the object. Contains the null value if there is no object attribute.
SAVE_OBJECT_LIBRARY	VARCHAR(10)	The name of the library from which the object was saved. Contains the null value if there is no saved library name.
SAVE_OBJECT	VARCHAR(10)	The name of the saved object. Contains the null value if there is no saved object name.
OBJECT_ASP_NAME	VARCHAR(10)	The name of the auxiliary storage pool (ASP) in which the object resides. A value of *SYSBAS indicates the system ASP and all basic user ASPs.
OBJECT_ASP_NUMBER	INTEGER	The number of the ASP device. 1 indicates the system ASP.
PROGRAM_STATE	VARCHAR(8)	The state of the program that was restored. INHERIT An inherit state program was restored. SYSTEM A system state program was restored. USER A user state program was restored. Contains the null value if OBJECT_TYPE is not PGM or *SRVPGM.
COMMAND_STATE	VARCHAR(7)	Whether the command is a system command. SYSTEM A system command was restored. USER A user state command was restored. Contains the null value if OBJECT_TYPE is not *CMD.
SAVE_SYSTEM	VARCHAR(8)	The system from which the object was saved. Contains the null value if the system from which the object was saved was running a release prior to IBM i 7.1, or if a value is not available.
RESTORE_PRIVATE_AUTHORITIES	VARCHAR(3)	Private authorities requested to be restored. YES Private authorities (PVTAUT) was specified as YES on the restore command. NO Private authorities (PVTAUT) was specified as NO on the restore command.
PRIVATE_AUTHORITIES_SAVED	INTEGER	Number of private authorities saved.
PRIVATE_AUTHORITIES_RESTORED	INTEGER	Number of private authorities restored.
SIGNATURE_STATUS	VARCHAR(12)	The signature status of the restored object. IGNORED Signature ignored NOT SIGNABLE Unsignable object NOT TRUSTED Untrusted signature NOT VERIFIED Signature exists but is not verified UNMATCHED Signature does not match object content VALID Signature is valid WRONG FORMAT Signature was not in IBM i format Contains the null value if a value is not available.
PATH_NAME	VARGRAPHIC(5000) CCSID 1200	The path name of the object. Contains the null value if the object is not in the "root" (/), QOpenSys, or user-defined file systems.
PATH_NAME_INDICATOR	VARCHAR(3)	Path name indicator. NO The PATH_NAME column does not contain an absolute path name for the object, instead it contains a relative path name. The RELATIVE_DIRECTORY_FILE_ID can be used to form an absolute path name with this relative path name. YES The PATH_NAME column contains complete absolute path name for the object. Contains the null value if the object is not in the "root" (/), QOpenSys, or user-defined file systems.
RELATIVE_DIRECTORY_FILE_ID	BINARY(16)	When PATH_NAME_INDICATOR is NO, contains the file ID of the directory that contains the object identified in the PATH_NAME column. Contains the null value when PATH_NAME_INDICATOR is YES, or if the object is not in the "root" (/), QOpenSys, or user-defined file systems.
IFS_OBJECT_NAME	VARGRAPHIC(512) CCSID 1200	The name of the object. Contains the null value if the object is not in the "root" (/), QOpenSys, or user-defined file systems.
OBJECT_FILE_ID	BINARY(16)	The file ID of the object. Contains the null value if the object is not in the "root" (/), QOpenSys, or user-defined file systems.
PARENT_FILE_ID	BINARY(16)	The file ID of the parent directory. Contains the null value if the object is not in the "root" (/), QOpenSys, or user-defined file systems.
PREV_OBJECT_FILE_ID	BINARY(16)	The file ID of the object that was replaced on the restore. Contains the null value if the object did not exist prior to the restore or is not in the "root" (/), QOpenSys, or user-defined file systems.
SAVE_OBJECT_FILE_ID	BINARY(16)	The file ID (FID) of the saved object. This is the FID the object had on the save system. Contains the null value if the object is not in the "root" (/), QOpenSys, or user-defined file systems.
EXIT_PROGRAM_SCAN	VARCHAR(11)	Whether the object will be scanned when exit programs are registered with any of the integrated file system scan-related exit points. CHANGE ONLY The object will be scanned according to the rules described in the scan-related exit programs only if the object has been modified since the last time the object was scanned. It will not be scanned if the scanning software has been updated. This attribute only takes effect if the Scan file systems control (QSCANFSCTL) system value has *USEOCOATR specified. Otherwise, it will be treated the same as YES. NO The object will not be scanned according to the rules described in the scan-related exit programs. YES The object will be scanned according to the rules described in the scan-related exit programs if the object has been modified or if the scanning software has been updated since the last time the object was scanned. Contains the null value if the object is not in the "root" (/), QOpenSys, or user-defined file systems.
SET_EFFECTIVE_USER_ID	VARCHAR(3)	The set effective user ID (SETUID) mode indicator for the restored object. NO The SETUID mode bit is not on. YES The SETUID mode bit is on. Contains the null value if the object is not in the "root" (/), QOpenSys, or user-defined file systems.
SET_EFFECTIVE_GROUP_ID	VARCHAR(3)	The set effective group ID (SETGID) mode indicator for the restored object. NO The SETGID mode bit is not on. YES The SETGID mode bit is on. Contains the null value if the object is not in the "root" (/), QOpenSys, or user-defined file systems.
OFFICE_USER	VARCHAR(10)	The name of the office user. Contains the null value if a value is not available.
OFFICE_ON_BEHALF_OF_USER	VARCHAR(10)	User working on behalf of another user. Contains the null value if a value is not available.
DLO_NAME	VARCHAR(12)	The name of the restored document library object. Contains the null value if there is no document library object.
FOLDER_PATH	VARCHAR(63)	The folder into which the document library object was restored. Contains the null value if there is no folder path.
SAVED_DLO_NAME	VARCHAR(12)	The name of the saved document library object. Contains the null value if there is no saved document library object.
SAVED_FOLDER_PATH	VARCHAR(63)	The folder from which the document library object was saved. Contains the null value if there is no saved folder path.

Example

List objects that were restored into APPLIB this week.

SELECT OBJECT_NAME, OBJECT_TYPE
  FROM TABLE (
      SYSTOOLS.AUDIT_JOURNAL_OR (STARTING_TIMESTAMP => CURRENT TIMESTAMP - 7 DAYS)
    )
  WHERE OBJECT_LIBRARY = 'APPLIB';