Safeguard Audit Service Manual (G06.24+, H06.03+)
Producing SAFEART Reports
Safeguard Audit Service Manual—520480-014
6-9
Specifying Selection Criteria
These statistics appear in the report summary:
The complete report of the selected events appears in the specified DESTINATION
FILE.
Specifying Selection Criteria
Proper use of selection criteria is essential to producing concise and useful reports.
Use the SET WHERE command to select the type of events you want to include in a
report.
Before trying to establish selection criteria, become familiar with the possible items that
can appear in a SAFEART report. For more information, see Section 7, SAFEART
Field Descriptions.
Use this process to help specify selection criteria for a report:
1. Determine which types of events you want to include in your report.
2. To determine which fields you can use to select the events you are interested in,
see Section 7, SAFEART Field Descriptions.
3. Formulate appropriate comparison statements to use in SET WHERE commands.
For example, suppose that you want the report to include the actions of an operator
with the name SUPER.MOE. Table 7-1 on page 7-3, indicates that the
SubjectUserName field contains the group name.member name of the user
attempting an operation. To select events performed by SUPER.MOE, use the
comparison statement SubjectUserName=SUPER.MOE. The SET WHERE command
follows:
<=SET WHERE SubjectUserName=SUPER.MOE
Complete Events The number of complete events read from the audit file or files.
An event might have more than one record associated with it.
For more information, see Reviewing Reports on page 6-18.
Header Records The number of header records found in the audit files. There
should be one header record for each audit file used.
Incomplete
Events
The number of primary records with one or more missing
secondary records. These events are not used for the report
even if they pass the selection criteria.
Other Records The number of secondary records with no primary record.
These events are not used for the report even if they passed the
selection criteria.
Total Records The number of primary and secondary records read from the
audit file or files.
Events Printed The number of complete events selected for the report.