QUERY ACTLOG (Query the activity log)

Use this command to display messages generated by the server and client. This command provides filtering options that can be used to limit the number of messages that are displayed and the time that it takes to process this query. If you do not specify any parameters with this command, all messages that were generated in the previous hour are displayed.

The activity log contains all messages that are sent to the server console under normal operation. The results of commands entered at the server console are not recorded in the activity log unless the command affects or starts a background process or client session. Error messages are displayed in the activity log.

Restriction: You cannot schedule the QUERY ACTLOG command by using the DEFINE SCHEDULE command.

Privilege class

Any administrator can issue this command.

Syntax

Notes:

¹ The JOB parameter applies only to the creation of retention sets and storage rule jobs.

Parameters

BEGINDate

Specifies the beginning date of the range for messages to be displayed. Messages that were generated on or after this date are displayed. The default is the current date. This parameter is optional.

You can specify the date by using one of the following values:

Value	Description	Example
MM/DD/YYYY	A specific date.	05/15/2018
TODAY	The current date.	TODAY
TODAY-days or -days	The current date minus the specified number of days. The maximum number of days that you can specify is 9999.	TODAY-7 or -7. To display information beginning with messages created a week ago, you can specify BEGINDATE=TODAY-7 or BEGINDATE= -7.
EOLM (End Of Last Month)	The last day of the previous month.	EOLM
EOLM-days	The last day of the previous month minus the specified number of days.	EOLM-1 To include files that were active a day before the last day of the previous month
BOTM (Beginning Of This Month)	The first day of the current month.	BOTM
BOTM+days	The first day of the current month, plus the specified number of days.	BOTM+9 To include files that were active on the 10th day of the current month

BEGINTime

Specifies the beginning time of the range for messages to be displayed. Messages that were generated at or after this time are displayed. If you do not specify a time, all messages that occurred in the last hour are displayed.

You can specify the time by using one of the following values:

Value	Description	Example
HH:MM:SS	A specific time on the specified begin date	10:30:08
NOW	The current time on the specified begin date	NOW
NOW+HH:MM or +HH:MM	The current time plus hours and minutes on the specified begin date	NOW+03:00 or +03:00 If you issue this command at 9:00 with BEGINTIME=NOW+3 or BEGINTIME=+3, IBM Spectrum® Protect displays messages with a time of 12:00 or later on the begin date.
NOW-HH:MM or -HH:MM	The current time minus hours and minutes on the specified begin date	NOW-04:00 or -04:00 If you issue the QUERY ACTLOG command at 9:00 with BEGINTime=NOW-3:30 or BEGINTime= -3:30, IBM Spectrum Protect displays messages with a time of 5:30 or later on the begin date.

ENDDate

Specifies the ending date of the range for messages to be displayed. Messages that were issued on or before this date are displayed. If you do not specify a value, the current date is used. This parameter is optional.

You can specify the date by using one of the following values:

Value	Description	Example
MM/DD/YYYY	A specific date	05/15/2018
TODAY	The current date	TODAY
TODAY-days or -days	The current date minus days specified. The maximum number of days that you can specify is 9999.	TODAY-1 or -1 To display information created up to yesterday, you can specify ENDDATE=TODAY-1 or simply ENDDATE= -1.
EOLM (End Of Last Month)	The last day of the previous month.	EOLM
EOLM-days	The last day of the previous month minus days specified.	EOLM-1 To include files that were active a day before the last day of the previous month
BOTM (Beginning Of This Month)	The first day of the current month.	BOTM
BOTM+days	The first day of the current month, plus days specified.	BOTM+9 To include files that were active on the 10th day of the current month

ENDTime

Specifies the ending time of the range for messages to be displayed. Messages that were issued at or before this time are displayed. If you do not specify a value, all messages are displayed up to the time when you issued this command. This parameter is optional.

You can specify the time by using one of the following values:

Value	Description	Example
HH:MM:SS	A specific time on the specified end date	10:30:08
NOW	The current time on the specified end date	NOW
NOW+HH:MM or +HH:MM	The current time plus hours and minutes on the specified end date	NOW+03:00 or +03:00 If you issue this command at 9:00 with ENDTIME=NOW+3:00 or ENDTIME= +3:00, IBM Spectrum Protect displays messages with a time of 12:00 or earlier on the end date that you specify.
NOW-HH:MM or -HH:MM	The current time minus hours and minutes on the specified end date	NOW-03:30 or -03:30 If you issue this command at 9:00 with ENDTIME=NOW-3:30 or ENDTIME= -3:30, IBM Spectrum Protect displays messages with a time of 5:30 or earlier on the end date that you specify.

MSGno

Specifies an integer that defines the number of the message to be displayed from the activity log. This integer is only the numeric part of the message. This parameter is optional.

Search

Specifies a text string to search for in the activity log. Enclose the string expression in quotation marks if it contains blanks. You can use text and a wildcard character to specify this string. This parameter is optional.

Restriction: Do not enter as a text string either the IBM Spectrum Protect server name or text and a wildcard character that would find the server name. If you do so, the output includes messages that do not include the search string.

NODEname

Specifies that the query displays messages logged for this node. If you do not specify a value for this parameter, messages for all nodes are displayed.

JOB

Specifies that the query displays messages logged from a storage rule or retention set creation job that ran on the server. The required value is the job ID.

Messages for the specific job ID that is issued by the job scheduler are displayed. For storage rule jobs, messages that are logged for a storage rule operation are displayed. For retention set creation jobs, messages that are logged for the retention set creation process are displayed. When the activity log management style is retention-based, activity log messages for a specific job are retained in the activity log until a specified number of days after the associated retention set is deleted. The number of days is equal to the value specified in the SET ACTLOGRETENTION command.

When the server is configured to create retention sets, set the MGMTSTYLE parameter of the SET ACTLOGRETENTION command to DATE and not SIZE to ensure that messages in the activity log are not deleted inadvertently.

Tip: Job IDs apply only to the creation of retention sets and storage rule jobs.

ID: Specifies the ID of the storage rule or retention set creation job that you want to query. The job ID is a unique numeric value.

ORiginator

Specifies that the query displays messages logged by the server, client, or both. The default is ALL. You can specify one of the following values:

ALL

Specifies that the query displays messages that originated from the client and the server.

SErver

Specifies that the query displays messages that originated from the server.

CLient

Specifies that the query displays messages that originated from the client.

You can specify one of the following values to minimize processing time when querying the activity log for messages logged by the client:

OWNERname: Specifies that the query displays messages logged for a particular owner. If you do not specify a value for this parameter, messages for all owners are displayed.
SCHedname: Specifies that the query displays messages logged by a particular scheduled client activity. If you do not specify a value for this parameter, messages for all schedules are displayed.
DOmainname: Specifies that the query displays messages logged for a particular policy domain to which a named schedule belongs. This parameter is optional, unless you are specifying a schedule name.
SESsnum: Specifies that the query displays messages logged from a particular client session number. If you do not specify a value for this parameter, messages for all client sessions are displayed.

Example: Search the activity log for messages with specific text

Search the activity log for any message that contains the string delete. The output includes only messages produced during the past hour. Issue the command:

query actlog search=delete

Date/Time            Message
-------------------- -----------------------------------------
08/27/2019 15:19:43  ANR0812I Inventory client file expiration
                      complete: 0 files deleted.

Example: Search the activity log for messages within a specific time frame

Display messages that were generated yesterday between 9:30 and 12:30. Issue the command:

query actlog begindate=today-1 
begintime=09:30:00 endtime=12:30:00

Date/Time           Message
------------------- ----------------------------------------------
10/21/2019 10:52:36 ANR0407I Session 3921 started for administrator
                    ADMIN (WebBrowser) (HTTP 9.115.20.100(2315)).
10/21/2019 11:06:08 ANR0405I Session 3922 ended for administrator 
                    ADMIN (WebBrowser).
10/21/2019 12:16:50 ANR0405I Session 3934 ended for administrator 
                    ADMIN (WebBrowser).

Example: Search the activity log for messages from a specific client node

Search the activity log for IBM Spectrum Protect messages from the client for node JEE. Issue the command:

query actlog originator=client node=jee

Date/Time           Message
------------------- -------------------------------------------------
06/10/2019 15:46:22 ANE4007E (Session No: 3 Node: JEE) Error 
                    processing '/jee/report.out': access to the 
                    object is denied
06/11/2019 15:56:56 ANE4009E (Session No: 4 Node: JEE) Error 
                    processing '/jee/work.lst': disk full condition

Example: Search the activity log for client and server messages from a specific client node and session

Search the activity log for IBM Spectrum Protect messages from the client and server for node A associated with Session 1. The output includes all messages with the defined text string, "(SESSION: 1)". Issue the command:

query actlog search="(SESSION: 1)"

Date/Time            Message
-------------------  ------------------------------------------------
02/13/2012 12:13:42   ANR0406I Session 1 started for node A (WinNT)
                      (Tcp/Ip colind(2463)). (SESSION: 1)
02/13/2012 12:13:56  ANE4952I (ANE4985I Session: 1, ANE4986I Node: A)
                      Total number of objects inspected:       34  
                      (SESSION: 1)
02/13/2012 12:13:56  ANE4954I (ANE4985I Session: 1, ANE4986I Node: A)
                      Total number of objects backed up:       34
                      (SESSION: 1)
02/13/2012 12:13:56  ANE4958I (ANE4985I Session: 1, ANE4986I Node: A)
                      Total number of objects updated:          0  
                      (SESSION: 1)
02/13/2012 12:13:56  ANE4964I (ANE4985I Session: 1, ANE4986I Node: A)
                      Elapsed processing time:           00:00:02  
                      (SESSION: 1)
02/13/2012 12:13:59  ANR0403I Session 1 ended for node A (WinNT).
                      (SESSION: 1)

Example: Search the activity log for client-generated messages from a client session

Search the activity log for IBM Spectrum Protect messages from a specific client session. The output includes only messages generated by the client. Issue the command:

query actlog sessnum=1

Date/Time            Message
-------------------  ------------------------------------------------
02/13/2012 12:13:56  ANE4952I (ANE4985I Session: 1, ANE4986I Node: A)
                      Total number of objects inspected:       34
                      (SESSION: 1)
02/13/2012 12:13:56  ANE4954I (ANE4985I Session: 1, ANE4986I Node: A)
                      Total number of objects backed up:       34
                      (SESSION: 1)
02/13/2012 12:13:56  ANE4958I (ANE4985I Session: 1, ANE4986I Node: A)
                      Total number of objects updated:          0
                      (SESSION: 1)
02/13/2012 12:13:56  ANE4964I (ANE4985I Session: 1, ANE4986I Node: A)
                      Elapsed processing time:           00:00:02
                      (SESSION: 1)

Example: Search the activity log for messages with a specific job ID

Search the activity log for messages that were issued during the last two days and contain the job ID 1250. Issue the command:

query actlog job=1250 begindate=today-2

Date/Time            Message
-------------------- -----------------------------------------
10/11/2020 22:16:10 ANR2875I Processing of the RULETIER1 storage rule has
                      started. (SESSION: 10, PROCESS: 2, JOB: 1250)
10/11/2020 22:16:10 ANR0214I Copying process 2 for storage rule RULETIER1
                      started from storage pool DPOOLSRC1 to file storage pool
                      COPYPOOL1. (SESSION: 10, PROCESS: 2, JOB: 1250)
10/11/2020 22:16:10 ANR0215I Copying process 2 from storage pool DPOOLSRC1
                      started searching for eligible file spaces. (SESSION:
                      10, PROCESS: 2, JOB: 1250)
10/11/2020 22:16:10 ANR0216I Copying process 2 identified 1 files for node
                      A, file space \\nodea\c$ to copy from
                      storage pool DPOOLSRC1 to storage pool COPYPOOL1.
                      (SESSION: 10, PROCESS: 2, JOB: 1250)
10/11/2020 22:16:10 ANR0984I Process 3 for Copy Storage Pool (Worker) started
                      in the BACKGROUND at 22:16:10. (SESSION: 10, PROCESS: 3,
                      JOB: 1250)
10/11/2020 22:16:10 ANR0216I Copying process 2 identified 1 files for node
                      B, file space \\nodeb\d$ to copy from
                      storage pool DPOOLSRC1 to storage pool COPYPOOL1.
                      (SESSION: 10, PROCESS: 2, JOB: 1250)

Field descriptions

Date/Time: Specifies the date and time when the message was generated by the server or client.
Message: Specifies the message that was generated by the server or client.