Administrator Guide : Security : Using solidDB® audit features : Audit Info record format
  
Audit Info record format
Audit Info record types
Record id
Description
CONNECT
A new user connection
CONNERR
An user connection that failed
DISCONN
A user has disconnected
SQLEXEC
SQL execute
SQLERRO
Error in SQL execute
TRXCOMM
Transaction commit
TRXERRO
Error in transaction commit
TRXROLL
Transaction rollback
FULLQUE
Audit read queue full, some records discarded
SYSTEM
A system record that can contain information about server startup, shutdown and HotStandby role changes. Details about the event can be found in fields VERB and FULL_SQL.
Audit Info record format
The actual record is given as a character string. Different fields are separated with a comma. Record format has two parts. First part is generic to all record types and second part is specific to some record types.
Connect and disconnect related records CONNECT, CONNERR and DISCONN have only the generic part.
Generic part of the record common to all types has the following fields:
Type
Description
time
Unix style time in seconds since 1970
msg_id
Unique id of the message since server was started
session_id
Client session id inside the server
client_ip
Client machine name and IP address
client_port
N/A (client port number)
server_ip
Server IP address when using TCP/IP
server_port
Server port number when using TCP/IP
db_user
User name used to connect to solidDB
server_type
Always solidDB
server_os
Operating system in the server
client_os
N/A (operating system in the client)
client_hostname
Client machine name and IP address
server_hostname
Server machine host name
comm_protocol
Communication protocol used by client to connect to server
db_protocol
Database protocol that the client used to connect to solidDB (e.g. ODBC)
db_protocol_version
Version of the db_protocol
os_user
N/A
source_progam
Client application info if set by the application
client_mac
N/A
server_description
Server description
service_name
Server name
process_id
Server process id
db_name
Always solidDB
app_user_name
N/A
error_code
Native error code, or zero if no error
error_info
Error info text
All other than connect, disconnect and FULLQUE related records have the following additional fields. For SYSTEM records, the information about the event is stored in the fields VERB and FULL SQL.
Verb
Type of request
sql_len
Length of the SQL string
full_sql
SQL string
param_len
Length of SQL parameter values
sql_params
SQL parameter values, used only if server is configured to send also parameter values
catalog
Current catalog when executing SQL
schema
Current schema when executing SQL
records_affected
Number of records affected. This value has a meaning only with SQL insert, update and delete operations.
execution_time
SQL execution time in seconds
FULLQUE record has the following format:
Type
Record type (FULLQUE)
time
Unix style time in seconds since 1970
lost_records
Number of records lost (not returned by the ADMIN COMMAND)
Example record values
type : CONNECT, time : 1410525958, msg_id : 11, session_id : 9, client_ip : JARMOR-R2, client_port : 0, server_ip : , server_port : 0, db_user : DBA, server_type : , server_os : , client_os : , client_hostname : JARMOR-R2, server_hostname : JARMOR-R2, comm_protocol : NmPipe SOLID, db_protocol : ODBC, db_protocol_version : 1, os_user : , source_program : , client_mac : , server_description : solidDB, service_name : solidDB, language : SQL, process_id : 10944, db_name : solidDB, app_user_name : , error_code : 0, error_info :
 
type : SQLEXEC, time : 1410525962, msg_id : 13, session_id : 9, client_ip : JARMOR-R2, client_port : 0, server_ip : , server_port : 0, db_user : DBA, server_type : , server_os : , client_os : , client_hostname : JARMOR-R2, server_hostname : JARMOR-R2, comm_protocol : NmPipe SOLID, db_protocol : ODBC, db_protocol_version : 1, os_user : , source_program : , client_mac : , server_description : solidDB, service_name : solidDB, language : SQL, process_id : 10944, db_name : solidDB, app_user_name : , error_code : 0, error_info : , verb : select, sql_len : 20, full_sql : select * from tables, param_len : 0, sql_params : , catalog : DBA, schema : DBA, records_affected : 0, execution_time : 0
See also
Using solidDB® audit features