XYGATE Merged Audit Reference Manual

XYGATE Merged Audit
®
Reference Manual
Appendix E: XMA Host Macros
XYPRO Technology Corporation 210 Proprietary and Confidential
object-type
All or part of a valid Safeguard object type or
*
for all.
object-name
All or part of a valid object name or
*
for all.
outcome
ALL, SUCCESS, FAILURE, NORECORD.
audit-file-name
Location of your XMA tables ($volume.subvol).
output-filename
Spooler location and report name; for example:
$S.#XYGATE.XMAREP
sort-type
USER, LOGIN NAME, OBJECT, TIME.
operation
A valid operation or
*
for all.
debug
Determines if debugging information is displayed:
• 1 to display information
• 0 to not display information.
rulename
* for all. Possible contents for this field are XAC commands
and PQ groups.
product-code
One or more products separated by commas. NOT may be used.
alerted
The options are A = ALERTED, N = NON-ALERTED, and
B = BOTH.
result
*
or a specified text string.
messagecode
*
for all message codes.
messageid
*
for all Message IDs.
These parameters can be strung together on one line as shown below:
Example 1:
10> XMA_AUDIT_REPORT 2001-07-01 00:00 2001-07-01 23:59 222,* * * * USER * FAILURE
$DATA.XMADAT $S.#XYGATE.XMAREP TIME * 0 * * ALL * * *
The above command will generate a report:
• For the period beginning on 07/01/2001 at midnight and ending at 1 minute to
midnight the same day
• All Users in group 222 will be included (222,*)
• All (*) login names be included
• All (*) terminals will be included
• All nodes (*) will be included
• Only Object-types of USER will be selected
• All (*) Object-names will be included
• Only activities (Outcome) that have FAILED will be included
• The location of the SQL Audit Data Tables is $DATA.XMADAT
• The report output will go to the spooler location of $s.#xygate.xmarep