solidDB Help : Configuring and administering : Security : Auditing : Auditing all database operations : AuditInfo log records
  
AuditInfo log records
There are a number of different AuditInfo record types, with slightly differing formats.
AuditInfo record types
The following table describes the AuditInfo record types:
 
Record id
Description
CONNECT
A new user connection
CONNERR
An user connection that failed
DISCONN
A user has disconnected
SQLEXEC
SQL execute
SQLERRO
Error in SQL execute
TRXCOMM
Transaction commit
TRXERRO
Error in transaction commit
TRXROLL
Transaction rollback
FULLQUE
Audit read queue full, some records discarded
SYSTEM
A system record that can contain information about server startup, shutdown and HotStandby role changes. Details about the event can be found in fields verb and full_sql.
AuditInfo record format
Each AuditInfo record is a character string where each field and value pair is separated by a comma. With the exception of the FULLQUE record type, each record type includes a common set of fields. Some record types contain an additional set of fields.
The following table describes the common fields found in every record type (except FULLQUE).
 
Field
Description
time
Unix style time in seconds since 1970
msg_id
Unique id of the message since server was started
session_id
Client session id inside the server
client_ip
Client machine name and IP address
client_port
N/A (client port number)
server_ip
Server IP address when using TCP/IP
server_port
Server port number when using TCP/IP
db_user
User name used to connect to solidDB
server_type
Always solidDB
server_os
Operating system in the server
client_os
N/A (operating system in the client)
client_hostname
Client machine name and IP address
server_hostname
Server machine host name
comm_protocol
Communication protocol used by client to connect to server
db_protocol
Database protocol that the client used to connect to solidDB (for example, ODBC)
db_protocol_version
Version of the db_protocol
os_user
N/A
source_progam
Client application info if set by the application
client_mac
N/A
server_description
Server description
service_name
Server name
process_id
Server process id
db_name
Always solidDB
app_user_name
N/A
error_code
Native error code, or zero if no error
error_info
Error info text
The record types CONNECT, CONNERR and DISCONN have only the common fields. All other record types (except FULLQUE) have the following additional fields.
 
Field
Description
verb
Statement type
sql_len
Length of the SQL string
full_sql
SQL string
param_len
Length of SQL parameter values
sql_params
SQL parameter values, used only if server is configured to send also parameter values
catalog
Current catalog when executing SQL
schema
Current schema when executing SQL
records_affected
Number of records affected. This value has a meaning only with SQL insert, update and delete operations.
execution_time
SQL execution time in seconds
The FULLQUE record type has just the following fields:
 
Field
Description
time
Unix style time in seconds since 1970
lost_records
Number of records lost (not returned by the ADMIN COMMAND)
Example record values
The following records are examples of the CONNECT and SQLEXEC record types:
CONNECT
type : CONNECT, time : 1410525958, msg_id : 11, session_id : 9, client_ip : JARMOR-R2, client_port : 0, server_ip : , server_port : 0, db_user : DBA, server_type : , server_os : , client_os : , client_hostname : JARMOR-R2, server_hostname : JARMOR-R2, comm_protocol : NmPipe SOLID, db_protocol : ODBC, db_protocol_version : 1, os_user : , source_program : , client_mac : , server_description : solidDB, service_name : solidDB, language : SQL, process_id : 10944, db_name : solidDB, app_user_name : , error_code : 0, error_info :
SQLEXEC
type : SQLEXEC, time : 1410525962, msg_id : 13, session_id : 9, client_ip : JARMOR-R2, client_port : 0, server_ip : , server_port : 0, db_user : DBA, server_type : , server_os : , client_os : , client_hostname : JARMOR-R2, server_hostname : JARMOR-R2, comm_protocol : NmPipe SOLID, db_protocol : ODBC, db_protocol_version : 1, os_user : , source_program : , client_mac : , server_description : solidDB, service_name : solidDB, language : SQL, process_id : 10944, db_name : solidDB, app_user_name : , error_code : 0, error_info : , verb : select, sql_len : 20, full_sql : select * from tables, param_len : 0, sql_params : , catalog : DBA, schema : DBA, records_affected : 0, execution_time : 0
Go up to
Auditing all database operations