Command Reference

db2audit - Audit Facility Administrator Tool

DB2 provides an audit facility to assist in the detection of unknown or unanticipated access to data. The DB2 audit facility generates and permits the maintenance of an audit trail for a series of predefined database events. The records generated from this facility are kept in an audit log file. The analysis of these records can reveal usage patterns which would identify system misuse. Once identified, actions can be taken to reduce or eliminate such system misuse. The audit facility acts at an instance level, recording all instance level activities and database level activities.

Authorized users of the audit facility can control the following actions within the audit facility, using db2audit:

• Start recording auditable events within the DB2 instance.

• Stop recording auditable events within the DB2 instance.

• Configure the behavior of the audit facility.

• Select the categories of the auditable events to be recorded.

• Request a description of the current audit configuration.

• Flush any pending audit records from the instance and write them to the audit log.

• Extract audit records by formatting and copying them from the audit log to a flat file or ASCII delimited files. Extraction is done for one of two reasons: In preparation for analysis of log records, or in preparation for pruning of log records.

• Prune audit records from the current audit log.

For a complete description of this command, see the Administration Guide.

[ DB2 List of Books | Search the DB2 Books ]