QUERY ACTLOG (Query the activity log)

Use this command to display messages generated by the server and client. This command provides filtering options that can be used to limit the number of messages displayed and the time that it takes to process this query. If you do not specify any parameters with this command, all messages generated in the previous hour are displayed.

The activity log contains all messages that are sent to the server console under normal operation. The results of commands entered at the server console are not recorded in the activity log unless the command affects or starts a background process or client session. Error messages are displayed in the activity log.

Restriction: You cannot schedule the QUERY ACTLOG command by using the DEFINE SCHEDULE command.

Privilege class

Any administrator can issue this command.

Syntax


                 .-BEGINDate--=--current_date-.   
>>-Query ACtlog--+----------------------------+----------------->
                 '-BEGINDate--=--date---------'   

   .-BEGINTime--=--currenttime_minus_1_hour-.   
>--+----------------------------------------+------------------->
   '-BEGINTime--=--time---------------------'   

   .-ENDDate--=--current_date-.  .-ENDTime--=--current_time-.   
>--+--------------------------+--+--------------------------+--->
   '-ENDDate--=--date---------'  '-ENDTime--=--time---------'   

>--+--------------------------+--+-------------------+---------->
   '-MSGno--=--message_number-'  '-Search--=--string-'   

>--+------------------------+----------------------------------->
   '-NODEname--=--node_name-'   

   .-ORiginator--=--ALL---------------.   
>--+----------------------------------+------------------------><
   '-ORiginator--=--+-ALL-----------+-'   
                    +-SErver--------+     
                    '-CLient--| A |-'     

A

|--+--------------------------+--------------------------------->
   '-OWNERname--=--owner_name-'   

>--+-----------------------------+------------------------------>
   '-SCHedname--=--schedule_name-'   

>--+----------------------------+------------------------------->
   '-DOmainname--=--domain_name-'   

>--+----------------------------+-------------------------------|
   '-SESsnum--=--session_number-'

Parameters

BEGINDate

Specifies the beginning date of the range for messages to be displayed. All messages meeting the time range criteria that occurred after this date are displayed. The default is the current date. This parameter is optional.

You can specify the date using one of the following values:

Value	Description	Example
MM/DD/YYYY	A specific date	09/15/1998
TODAY	The current date	TODAY
TODAY-days or -days	The current date minus days specified. The maximum number of days you can specify is 9999.	TODAY –7 or –7. To display information beginning with messages created a week ago, you can specify BEGINDATE=TODAY-7 or BEGINDATE= -7.
EOLM (End Of Last Month)	The last day of the previous month.	EOLM
EOLM-days	The last day of the previous month minus days specified.	EOLM-1 To include files that were active a day before the last day of the previous month.
BOTM (Beginning Of This Month)	The first day of the current month.	BOTM
BOTM+days	The first day of the current month, plus days specified.	BOTM+9 To include files that were active on the 10th day of the current month.

BEGINTime

Specifies the beginning time of the range for messages to be displayed. All messages meeting the time range criteria that occurred after this time are displayed. If you do not specify time, all messages that occurred in the last hour are displayed.

You can specify the time using one of the following values:

Value	Description	Example
HH:MM:SS	A specific time on the specified begin date	10:30:08
NOW	The current time on the specified begin date	NOW
NOW+HH:MM or +HH:MM	The current time plus hours and minutes on the specified begin date	NOW+03:00 or +03:00. If you issue this command at 9:00 with BEGINTIME=NOW+3 or BEGINTIME=+3, Tivoli® Storage Manager displays messages with a time of 12:00 or later on the begin date.
NOW-HH:MM or -HH:MM	The current time minus hours and minutes on the specified begin date	NOW-04:00 or -04:00. If you issue the QUERY ACTLOG command at 9:00 with BEGINTime=NOW-3:30 or BEGINTime= -3:30, Tivoli Storage Manager displays messages with a time of 5:30 or later on the begin date.

ENDDate

Specifies the ending date of the range for messages to be displayed. All messages meeting the time range criteria that occurred before this date are displayed. If you do not specify a value, the current date is used. This parameter is optional.

You can specify the date using one of the following values:

Value	Description	Example
MM/DD/YYYY	A specific date	09/15/1998
TODAY	The current date	TODAY
TODAY-days or -days	The current date minus days specified. The maximum number of days you can specify is 9999.	TODAY–1 or –1. To display information created up to yesterday, you can specify ENDDATE=TODAY-1 or simply ENDDATE= -1.
EOLM (End Of Last Month)	The last day of the previous month.	EOLM
EOLM-days	The last day of the previous month minus days specified.	EOLM-1 To include files that were active a day before the last day of the previous month.
BOTM (Beginning Of This Month)	The first day of the current month.	BOTM
BOTM+days	The first day of the current month, plus days specified.	BOTM+9 To include files that were active on the 10th day of the current month.

ENDTime

Specifies the ending time of the range for messages to be displayed. All messages meeting this time range criteria that occurred before this time are displayed. If you do not specify a value, all messages are displayed up to the time when you issued this command. This parameter is optional.

You can specify the time using one of the following values:

Value	Description	Example
HH:MM:SS	A specific time on the specified end date	10:30:08
NOW	The current time on the specified end date	NOW
NOW+HH:MM or +HH:MM	The current time plus hours and minutes on the specified end date	NOW+03:00 or +03:00. If you issue this command at 9:00 with ENDTIME=NOW+3:00 or ENDTIME= +3:00, Tivoli Storage Manager displays messages with a time of 12:00 or earlier on the end date you specify.
NOW-HH:MM or -HH:MM	The current time minus hours and minutes on the specified end date	NOW-03:30 or -03:30. If you issue this command at 9:00 with ENDTIME=NOW-3:30 or ENDTIME= -3:30, IBM® Tivoli Storage Manager displays messages with a time of 5:30 or earlier on the end date you specify.

MSGno

Specifies an integer that defines the number of the message to be displayed from the activity log. This integer is just the numeric part of the message. This parameter is optional.

Search

Specifies a text string that you want to search for in the activity log. Enclose the string expression in quotation marks if it contains blanks. You can use text and a wildcard character to specify this string. This parameter is optional.

Note: Do not enter as a text string either the IBM Tivoli Storage Manager server name or text and a wildcard character that would find the server name. If you do so, the output includes messages that do not include the search string.

NODEname

Specifies that the query displays messages logged for this node. If you do not specify a value for this parameter, messages for all nodes are displayed.

ORiginator

Specifies that the query displays messages logged by the server, client, or both. The default is ALL. Possible values are:

ALL

Specifies that the query displays messages that originated from the client and the server.

SErver

Specifies that the query displays messages that originated from the server.

CLient

Specifies that the query displays messages that originated from the client.

You can specify one of the following values to minimize processing time when querying the activity log for messages logged by the client:

OWNERname: Specifies that the query displays messages logged for a particular owner. If you do not specify a value for this parameter, messages for all owners are displayed.
SCHedname: Specifies that the query displays messages logged by a particular scheduled client activity. If you do not specify a value for this parameter, messages for all schedules are displayed.
DOmainname: Specifies that the query displays messages logged for a particular policy domain to which a named schedule belongs. This parameter is optional, unless you are specifying a schedule name.
SESsnum: Specifies that the query displays messages logged from a particular client session number. If you do not specify a value for this parameter, messages for all client sessions are displayed.

Example: Search activity log for messages with specific text

Search the activity log for any message that contains the string "delete". The output includes only messages produced during the past hour. Issue the command:

query actlog search=delete

Date/Time            Message
-------------------- -----------------------------------------
08/27/1998 15:19:43  ANR0812I Inventory client file expiration
                      complete: 0 files deleted.

Example: Search activity log for messages within a specific time frame

Display messages that occurred yesterday between 9:30 and 12:30. Issue the command:

query actlog begindate=today-1 
begintime=09:30:00 endtime=12:30:00

Date/Time           Message
------------------- ----------------------------------------------
10/21/1998 10:52:36 ANR0407I Session 3921 started for administrator
                    ADMIN (WebBrowser) (HTTP 9.115.20.100(2315)).
10/21/1998 11:06:08 ANR0405I Session 3922 ended for administrator 
                    ADMIN (WebBrowser).
10/21/1998 12:16:50 ANR0405I Session 3934 ended for administrator 
                    ADMIN (WebBrowser).

Example: Search activity log for messages from a specific client node

Search the activity log for Tivoli Storage Manager messages from the client for node JEE. Issue the command:

query actlog originator=client node=jee

Date/Time           Message
------------------- -------------------------------------------------
06/10/1998 15:46:22 ANE4007E (Session No: 3 Node: JEE) Error 
                    processing '/jee/report.out': access to the 
                    object is denied
06/11/1998 15:56:56 ANE4009E (Session No: 4 Node: JEE) Error 
                    processing '/jee/work.lst': disk full condition

Example: Search activity log for client and server messages from a specific client node and session

Search the activity log for Tivoli Storage Manager messages from the client and server for node A associated with Session 1. The output includes all messages with the defined text string, "SESSION: 1". Issue the command:

query actlog search="(SESSION:1)"

Date/Time            Message
-------------------  ------------------------------------------------
02/13/2012 12:13:42    ANR0406I Session 1 started for node A (WinNT)
                     (Tcp/Ip colind(2463)). (SESSION: 1)
02/13/2012 12:13:56  ANE4952I (ANE4985I Session: 1, ANE4986I Node: A)  Total
                      number of objects inspected:       34  (SESSION: 1)
02/13/2012 12:13:56  ANE4954I (ANE4985I Session: 1, ANE4986I Node: A)  Total
                      number of objects backed up:       34  (SESSION: 1)
02/13/2012 12:13:56  ANE4958I (ANE4985I Session: 1, ANE4986I Node: A)  Total
                      number of objects updated:          0  (SESSION: 1)
 
02/13/2012 12:13:56  ANE4964I (ANE4985I Session: 1, ANE4986I Node: A)  Elapsed
                      processing time:           00:00:02  (SESSION: 1)
02/13/2012 12:13:59  ANR0403I Session 1 ended for node A (WinNT). (SESSION: 1)

Example: Search activity log for client-generated messages from a client session

Search the activity log for Tivoli Storage Manager messages from a specific client session. The output includes only messages generated by the client. Issue the command:

query actlog sessnum=1

Date/Time            Message
-------------------  ------------------------------------------------
02/13/2012 12:13:56  ANE4952I (ANE4985I Session: 1, ANE4986I Node: A)  Total
                      number of objects inspected:       34  (SESSION: 1)
02/13/2012 12:13:56  ANE4954I (ANE4985I Session: 1, ANE4986I Node: A)  Total
                      number of objects backed up:       34  (SESSION: 1)
02/13/2012 12:13:56  ANE4958I (ANE4985I Session: 1, ANE4986I Node: A)  Total
                      number of objects updated:          0  (SESSION: 1)

02/13/2012 12:13:56  ANE4964I (ANE4985I Session: 1, ANE4986I Node: A)  Elapsed
                      processing time:           00:00:02  (SESSION: 1)

Field descriptions

Date/Time: Specifies the date and time when the message was generated by the server or client.
Message: Specifies the message that was generated by the server or client.

Related commands

Table 1. Command related to QUERY ACTLOG
Command	Description
SET ACTLOGRETENTION	Specifies the number of days to retain log records in the activity log.