HP Neoview Release 2.4 Software - Manual (Page 75)

Example A-2 Search Event Logs for Abnormal Program Termination
This report performs a case-insensitive search for all events in which the event text contains the
string 'ABEND' during a given time period.
SELECT
EVENT_NUMBER AS EVENT_NUMBER,
GENERATED_TIMESTAMP_LCT AS GEN_TIME,
SUBSTRING(SUBSTRING(SSID FROM CHAR_LENGTH('TANDEM. '))FOR LOCATE('.' ,SUBSTRING(SSID FROM
CHAR_LENGTH('TANDEM. ')) )-1) AS SUB_SYS,
trim(substring(Text FROM CHAR_LENGTH('00:00 01FEB10 001.01.1000 '))) AS Event_Text,
PROCESS_SEGMENT AS SEGMENT,
TRIM(PROCESS_ID) AS PROCESS_NAME,
NODE_ID AS NODE_ID,
PIN AS PIN,
SEGMENT_ID AS SEGMENT_ID,
SQLCD AS SQLCD,
FSERROR AS FSERROR,
COLLECTOR AS COLLECTOR,
LOG_TIMESTAMP_LCT AS LOG_TIME_LCT,
TEXT AS FULL_TEXT,
SSID
FROM
NEO.HP_METRICS.EVENTS_VW1
WHERE
GENERATED_TIMESTAMP_LCT >= TIMESTAMP '$$__FROM_TIME$$' - interval '1' second and
GENERATED_TIMESTAMP_LCT <= TIMESTAMP '$$__TO_TIME$$' + interval '1' second
AND UPSHIFT(TEXT) LIKE '% ABEND%'
ORDER BY
GEN_TIME DESC
FOR READ UNCOMMITTED ACCESS IN SHARE MODE
/*QueryDocumentationStart
(C) COPYRIGHT 2010 HEWLETT-PACKARD DEVELOPMENT COMPANY, LP.
QueryTitle: Search EMS for Abends
Application: Neoview Reports, HPDM
QueryStyleRevNum: S2.0
ReposRevNum: R2.4 SP2
QueryRevNum:Q1
QueryShortDesc:
This report searches for all EMS events where the event text contains the string 'ABEND' during a time
period.
The submitter is prompted to enter the time period.
Search is case insensitive.
Results are listed in descending event generation time order.
Prompts:
__FROM_TIME = the starting time period to summarize
__TO_TIME = The ending time period to summarize
Columns Returned:
EVENT_NUMBER = Event number of the event. Note that event numbers are unique only within a given subsystem;
that is two subsystems may reuse the same event number to describe two different events.
GENERATED_TIMESTAMP_LCT = The time the event was generated (in Local Civil Time)
SUB_SYS = Shortened version of the subsystem id.
EVENT_TEXT = Event text details with leading date and time removed.
SEGMENT = <segment name> of the process that generated the event
PROCESS_NAME = <segment name>.<process name> of the process that generated the event
NODE_ID = CPU (Processing node) number of the process that generated the event
PIN = Process ID number
SQL_CD = For events pertaining to SQL errors, this is the SQL error code. Null for other events.
FSERROR = File system error; populated only for SQL errors that have file system errors. Null for other
events
COLLECTOR = The name of the EMS collector where this event was logged (without a segment name). LOG_TIME_LCT
= The time at which the event was placed in the EMS log (in Coordinated Universal Time).
FULL_TEXT = The text description of the EMS event including leading date time.
SSID = Full Subsystem ID of the subsystem that generated the event.
Views Used: EVENTS_VW1
QueryDocumentationEnd*/
75