Default language.

Audit report fields


This topic describes the fields in the most commonly used audit report, the DB2 Authorization Failures report (BAUDTAUT).

BAUDTAUT: DB2 AUTHORIZATION FAILURES                             05/08/26 14:48:48    PAGE     5             

   Group :                                                                                                 DB2 SSID: DECN 8.1       
   Member:                                                                                                                          
                                   ------------------------------Authorization Failures by Object Type-----------------------------
   Auth     Plan     Corr          Total    Buffer Pool DB/OB    Plan     Tablespace Stogroup Table/View UserAuth  Package  CollID  
   -------- -------- ------------  -------- ----------- -------- -------- ---------- -------- ---------- -------- -------- --------
+  DMRQA11  DSNESPRR DMRQA11              4           0        0        3          0        0          1        0        0        0

+    Time  : 05/07/01 14:11:22.888545       Obj Type: TABLE OR VIEW    Auth Checked: BMCJMB9     Privilege: UPDATE           
     Source: RDHJMB_R. A21_COMMENT_ABCDEF   Target  :         .                                                              
     ACEE Utoken:  500120060001C0000000000000000000000000000000000000000000000000000000000000000000                          
     Length of failing SQL Statement:  14418136                                                                                    
     SQL   : TE RDHJMB_RDHJMB1_RDHJMB2_RDHJMB3_RDHJMB4.A21_COMMENT_ABCDEFGHHIJKLMNOPQRSTUVWXYZ_ABCDEFGHIJKLMNOPQRSTUVWXYZ          
              TE RDHJMB_RDHJMB1_RDHJMB2_RDHJMB3_RDHJMB4.A21_COMMENT_ABCDEFGHHIJKLMNOPQRSTUVWXYZ_ABCDEFGHIJKLMNOPQRSTUVWXYZ         
              SET     COMMENT_ID_1234567890123456789 = 9

The following table describes the fields in the DB2 Authorizations Failures report.

Field

Description

AUTH

Authorization ID of the user accessing this Db2 system (QWHCAID)

PLAN

Plan name of the application program, transaction, or utility executed (QWHCPLAN)

CORR

Correlation ID

TIME

Time of one of the following actions (QWACESC):

  • Authorization failure
  • GRANT or REVOKE operation
  • Audited DDL access
  • Audited DML access
  • BIND against an audited Db2 table
  • Authorization ID change
  • Utility access against a Db2 table
  • Audit record completed

OBJ TYPE

Db2 object type, such as BUFFERPOOL, PLAN, or TABLESPACE (QW0140OB) or Db2 object type of the GRANT or REVOKE, such as BUFFERPOOL, PLAN, or TABLESPACE (QW0141OB)

AUTH CHECKED

Authorization ID that caused the failure (QW0140UR)

PRIVILEGE

Operation (privilege) on which the failure occurred, such as SELECT, INSERT, BIND, ADD, or LOCK TABLE (QW0140PR)

SOURCE

Source Db2 table name or plan name involved in the authorization failure (QW0140SN)

TARGET

Target Db2 table name or plan name involved in the authorization failure (QW0140TN)

ACEE UTOKEN

ACEE utoken, if it is available (QW0140UT)

LENGTH OF FAILING SQL STATEMENT

Length of failing SQL statement (QW0140LL)

SQL

Text of the failing SQL statement (QW0140TX)

 

Tip: For faster searching, add an asterisk to the end of your partial query. Example: cert*

BMC AMI Ops Monitor for Db2 13.1