Summary Report - Basic and Field Descriptions
To produce a basic summary report, use the AUDIT REPORT LEVEL(SUMMARY) command without any TYPE constraints.
You can generate a summary report as follows:
AUDIT
REPORT
LEVEL (SUMMARY)
In group-scope reports, MEMBER and SUBSYSTEM are not shown.
Levels of accumulation (Audit summary report)
The Audit summary report gives the following levels of accumulation:
- GROUP TOTAL
- The group total is printed on group-scope reports when the member value changes.
- SUBTOTAL
- If you request ordering by three identifiers, a subtotal block
of two lines is printed on the change of the second-level identifier
when there is more than one third-level identifier reported under
it.
The first line shows the string *SUBTOTAL* in the first column.
The second line shows the name of the second identifier in the first column and the calculated data in all other columns.
- TOTAL
- If you request ordering by two or three identifiers, a total block
of two lines with all applicable data is printed on the change of
the first-level identifier when there is more than one second-level
identifier reported under it.
The first line shows the string *TOTAL* in the first column.
The second line shows the name of the first identifier in the first column, and the calculated data in all other columns.
- GRAND TOTAL
- A grand total block of two lines with all applicable data is printed
for a location when there is more than one first-level identifier
reported.
The first line shows the string *GRAND TOTAL* in the first column.
The second line shows the name of the member (in a member-scope report) or the group (in a group-scope report) in the first column, and the calculated data in all other columns.
Layout of a Member-Scope Audit Summary Report
Here is a sample layout of a Member-Scope Audit Summary report. LOCATION: LOCATI_2 OMEGAMON XE FOR DB2 PERFORMANCE EXPERT (V5R4M0) PAGE: 1-1
GROUP: GROUP_1 AUDIT REPORT - SUMMARY REQUESTED FROM: NOT SPECIFIED
MEMBER: MEMBER_2 TO: NOT SPECIFIED
SUBSYSTEM: SYS2 ORDER: PRIMAUTH-PLANNAME ACTUAL FROM: 01/30/15 04:21:44.17
DB2 VERSION: V10 SCOPE: MEMBER TO: 01/30/15 07:19:20.25
PRIMAUTH AUTH GRANT/ DDL DML READ DML WRITE DML AUTHID UTILITY
PLANNAME TOTAL FAILURE REVOKE ACCESS ACCESS ACCESS AT BIND CHANGE ACCESS
-------------------------- ---------- --------- --------- --------- --------- --------- --------- --------- ---------
AUTH_20
DSNESM68 4 0 0 0 0 0 4 0 0
LOAD 4 0 0 0 0 0 0 0 4
PLAN_20 18 2 2 4 2 2 0 6 0
PLAN_30 18 2 2 4 2 2 0 6 0
*TOTAL* 44 4 4 8 4 4 4 12 4
AUTH_30
DSNESM68 4 0 0 0 0 0 4 0 0
LOAD 4 0 0 0 0 0 0 0 4
PLAN_20 18 2 2 4 2 2 0 6 0
PLAN_30 16 2 2 2 2 2 0 6 0
*TOTAL* 42 4 4 6 4 4 4 12 4
*GRAND TOTAL* 86 8 8 14 8 8 8 24 8
Field description
The basic Audit summary report contains the following fields:
- OMEGAMON for DB2® Performance Expert identifiers
- The report can be sorted by up to five combinations of any three
identifiers. These are printed in the first three columns from the
left and indented in the sequence specified by ORDER.
The default is PRIMAUTH-PLANNAME.
For group-scope reports, MEMBER is automatically added as the last identifier.
The values printed in the following columns represent totals for each combination of the selected OMEGAMON for Db2 Performance Expert identifiers.
- TOTAL
- A total number of Audit events.
- AUTH FAILURE
- The total number of authorization failures (IFCID 140 records).
- GRANT/REVOKE
- The total number of authorization GRANTs or REVOKEs (IFCID 141).
- DDL ACCESS
- The total number of DDL operations against auditable DB2 tables (IFCID 142 records).
- DML READ ACCESS
- The total number of first READ attempts within a logical unit of work against auditable DB2 tables (IFCID 144 records).
- DML WRITE ACCESS
- The total number of first WRITE attempts against audited DB2 tables (IFCID 143 records).
- DML AT BIND
- The total number of statements referenced during a static or dynamic bind (IFCID 145) against auditable DB2 tables.
- AUTHID CHANGE
- The total number of initial AUTHID establishments, AUTHID changes, or attempted AUTHID changes (IFCID 055, 083, 087, and 169 records).
- UTILITY ACCESS
- The total number of times a utility was used to access a DB2 object (IFCID 024 records).