Log Master and tasks associated with auditing
Related topics
Manually achieving a meaningful audit is tedious and difficult. Because Db2 records every change to your data in the log, a solution is to use the log as an information source. With BMC AMI Log Master for Db2, you can search the Db2 log, retrieve information, and print a report quickly and easily.
The BMC AMI Log Master online interface guides you through steps for specifying search criteria to select specific log records. You can easily construct filters to narrow searches to specific users, tables, plans, or even column or value changes.
Audits of log information
BMC AMI Log Master generates reports by using a comprehensive reporting facility. You can select from a list of convenient standard default report formats with a choice of presentation, such as by user, job name, plan name, and so on.
All forms of BMC AMI Log Master output (including reports) include log data from transactions that are completed within the time frame that you specify. In this context, completed means either committed or aborted. BMC AMI Log Master also provides reports for situations when you need information about transactions that are not complete at the end of a time frame. For more information, see Auditing data changes.
Creating logical log files
BMC AMI Log Master provides a unique form of output called a logical log file that can help you use Db2 log data.
The format of the logical log is published and includes easy-to-use fields designed for use by application programs. You can create logical logs as the only output of a BMC AMI Log Master job or in addition to generated SQL and reports.
You can use the logical logs as input to application programs, input to report generators, or as permanent records of activity for audit requirements. You can even use logical logs as input to BMC AMI Log Master, saving the time needed to scan the Db2 log subsequent times for the same records. From a logical log, you can generate the same reports and other forms of output as you can from the Db2 log. Optionally, you can direct BMC AMI Log Master to include data definition language (DDL) objects in your logical log files. For more information, see Logical log output files.
Getting performance and statistical information
BMC AMI Log Master performance and statistical features:
- Display statistics about log activity
- Produce reports about commit, rollback, and image copy frequency
For more information, see Reference of default Log Master reports.
Analysis of data capture changes
You can analyze the impact of creating or altering your Db2 tables to use either the data capture changes (DCC) or the data capture none (DCN) attribute.
The Data Capture Changes report displays what was actually found in the log with either of the attributes and, in addition, presents what Db2 would have logged had the data capture attribute been set to its alternate value. For more information, see Data Capture Changes report.
Support for Db2 table-level security
BMC AMI Log Master can honor Db2 table-level security for all BMC AMI Log Master jobs.
You can use installation options to enable this type of security in your environment. For more information, see Controlled access to the Db2 log in Subsystem display, data sharing environments and controlled access.