Logs Searching

#### Search Results

Search

# Logs Searching

Logs are searched based on the selected layout and by adding additional search criteria. The available search criteria may be different for different layouts and depend on the connected database.

- Searching the Logs

- Refining the Search

- Possible Settings for Log Searching

## Searching the Logs

1. Click the layout on the left side of the main screen.

   A Search screen is displayed where you can add additional search criteria. The search criteria are different for each layout.

   Compare the following two example screens:

   The following screen displays different search criteria than the screen above.

2. If you want to use a layout other than the one that is currently selected, either

   - select the layout from the tree on the left side of the main screen, or

   - select the layout from Layout drop-down of the Search screen (if more than one layout is available).

3. Add the search criteria.

   Notes:

   1. To perform a search, you must add at least one additional search criterion besides the From and To dates.
   2. From the initial search, the fields that are not greyed out are global audit keys and must contain a value to be searched for. This value may contain an asterisk (*) for alphanumeric fields.
   3. Global audit keys in the initial search screen must not contain double quotes (") or apostrophes (').

4. Click the Search button to display the search result. For example:

   Note
   If nothing matching your search criteria is found, a message is displayed indicating that there is no data for your search criteria. You can then click the Edit search button to display the Search screen again.

5. To reload the search result, for example, after an update of the list size limit (see User Profile), click the refresh icon:

6. To set the height of the rows and select the columns to be displayed in the search result, click the settings icon:

   Select the desired row height.

   To define, rename or reorder the columns that are to be displayed in the search result, click Select columns. This displays the following:

   Select the check box for each column that is to be displayed in the search result.

   To rename a column, click the pencil icon. Type a new name and press Enter, or click the save icon that is shown next to the new name.

   To move a column to a different position, drag the move icon (displayed to the left of the check box) to the desired position.

   Click the Save button to save your changes.

7. To find results that match your search, enter text in the Filter field (shown next to the settings icon).

8. To change the search criteria, click the Edit search button at the bottom of the screen to display the Search screen again (see the description above).

## Refining the Search

1. To refine the search result, select the check boxes for one or more search results. For example:

2. Click the Refine search button at the bottom of the screen.

3. The Refine search screen appears. For example:

4. Add more search criteria.

   At this point it is possible to start a new search. This can be done by changing the layout.

   The following applies if the Hide all disabled (greyed out) fields check box is selected (see also User Profile): if one or more audit files are selected, only the fields that can be filled in are displayed.

   Only the fields that you fill in will appear in the refined search result. For example, if you add search criteria only in the PERSONNEL-ID field, then only that field will be displayed.

5. Click the Search button to display the refined search result. For example:

   Note
   If a field for which you enter search criteria shows Offline next to its name, the refined search result is not immediately shown. An additional screen is displayed instead, see Scheduled Reports for detailed information.

6. To view the details of a specific list from the refined search result, click the list to expand it.

7. Click an item in the list to view it.

   The View item screen appears and you can now use the Prev and Next buttons to navigate between the list items.

   For items related to Update record type records, the updated Adabas fields are highlighted to make it easier to find what was changed.

   Additionally, you can click on the three lines on the right side of the screen, approximately halfway down the screen. This allows you to toggle on and off the option to see the data in EBCDIC format:

   After toggling on, the EBCDIC values appear to right of the Data column. The `0x` indicates that the data is EBCDIC.

   Depending on your selection, the following tabs can be displayed in this view:

   - Data: relevant for commands that are not updates (A1).

   - Data before image: only relevant for update and delete commands (A1/E1).

   - Data after image: only relevant for update, delete and insert commands (A1/E1/N1).

   - ACBX info: always available.

   - Client info: always available.

   - FBUF: available for commands that include a format buffer and the subscription definition includes `FB` set to `Y` in the associated command type. See also Step 4. Add Source Files and related parameters to the Subscription Definition in Adabas Auditing Configuration (SYSALA).

   Click Download report to download the search result for the selected list. The report can be downloaded in one of these formats:

   - ALOG format

   - JSON format

   - CSV format

   Click the Edit search button next to the settings icon if you want to return to the Refine search screen.

## Possible Settings for Log Searching

AAV Documentation | IGR Display after "I" | Online Option D.2 |  | Explanation
--- | --- | --- | --- | ---
AAV | AAR |  |
AAV Documentation | IGR-Display ("I" online Option 1) | Data Dictionary (Online Option D.2) Table IGR |  | Explanation
|  | Field | Long Name | Comment: | Details:
Audit File | Form | FORM | FORM | FORM NAME | Name of the processed data
Subscription Name | Extension | EXT | EXTENSION | EXTENSION NAME | Name of the processed data extension
View Name | Report | REPORT |  |  |
Title | textstring | LTITLE | LIST_TITLE | LIST OR REPORT TITLE | User's description of the processed data
Processing Date | Date | B97DATE | B97_READER_INPUT_DATE | B97 READER INPUT DATE | Read-in date of the processed data
Processing Time | Time | B97TIME | B97_READER_INPUT_TIME | B97 READER INPUT TIME | Read-in time of the processed data
Job Name | Jobname | SRCJOBN | SOURCE_JOBNAME | SOURCE JOBNAME | Batchjob on the mainframe that read-in the processed data
Job ID | Jobid | SRCJOBI | SOURCE_JOB_JESID | SOURCE JOB JES-ID | JES-ID of the batchjob that read-in the processed data
Member | Member | SRCMEMBR | SOURCE_IMPORT_MEMBER | MEMBER NAME - IMPORT | Membername if an Import was done from a PDS/library
Dataset Name | Dataset Name | SRCDSN | SOURCE_DATASET_NAME | SOURCE DATASETNAME | Name of the imported PS,PDS or read-in JESSPOOL dataset
Submit User | Submit User | SRCSUBU | SOURCE_SUBMIT_USER | SOURCE SUBMIT USER-ID | Submitter of the batchjob that read-in the processed data
Submit Date | Submit Date | SRCSUBD | SOURCE_SUBMIT_DATE | SOURCE SUBMIT DATE | Date of the submission
Submit Time | Submit Time | SRCSUBT | SOURCE_SUBMIT_TIME | SOURCE SUBMIT TIME | Time of the submission
Line Count | Lines | SRCLNCZ | SOURCE_NUMBER_OF_LINES | NUMBER OF LINES | Number of lines in the processed dataset
Layout Group |  |  |  |  | Name of the Layout Group
Online Retention Period | Online Retention | ONLRETPD | ONLINE_RETENTION_PERIOD | ONLINE_RETENTION_PERIOD | Online retention period of the processed data
Index Retention Period | Index Retention | IDXRETPD | INDEX_RETENTION_PERIOD | INDEX_RETENTION_PERIOD | Online retention period of the generated index
Archive Expiration Date | Archive Expiration Date | AEXPDT | ARCHIVE_LIST_EXPDT | ARCHIVE EXPIRATION DATE | Archive expiration date of the archived data
Audit Data Online |  | IGRONLNE | IGR_ONLINE (Y/N) | LIST IS ONLINE YES/NO | The processed data is online YES or NO
Index Data Online |  | IDXONLNE | IDX_ONLINE (Y/N) | INDEX IS ONLINE (YES/NO) | The generated index is online YES or NO
Tenant | Owner | OWNER | OWNER | OWNER | The ownerfield of the IGR

### On this page

- Searching the Logs
- Refining the Search
- Possible Settings for Log Searching