Search event logs for a specific event number, Search event logs for specific event text – HP Neoview Release 2.5 Software User Manual
Page 69
Example A-3 Search Event Logs For a Specific Event Number
This report lists all occurrences of a specified event number within a given time period.
SELECT
EVENT_NUMBER AS EVENT_NUMBER,
GENERATED_TIMESTAMP_LCT AS GEN_TIME,
SUBSTRING(SUBSTRING(SSID FROM CHAR_LENGTH('TANDEM. '))FOR LOCATE('.' ,SUBSTRING(SSID FROM
CHAR_LENGTH('TANDEM. ')) )-1) AS SUB_SYS,
trim(substring(Text FROM CHAR_LENGTH('00:00 01FEB09 001.01.1000 '))) AS Event_Text,
PROCESS_SEGMENT AS SEGMENT,
TRIM(PROCESS_ID) AS PROCESS_NAME,
NODE_ID AS NODE_ID,
PIN AS PIN,
SEGMENT_ID AS SEGMENT_ID,
SQLCD AS SQLCD,
FSERROR AS FSERROR,
COLLECTOR AS COLLECTOR,
LOG_TIMESTAMP_LCT AS LOG_TIME_LCT,
TEXT AS FULL_TEXT,
SSID
FROM
NEO.HP_METRICS.EVENTS_VW1
WHERE
GENERATED_TIMESTAMP_LCT >= TIMESTAMP '$$__FROM_TIME$$' - interval '1' second and
GENERATED_TIMESTAMP_LCT <= TIMESTAMP '$$__TO_TIME$$' + interval '1' second
AND EVENT_NUMBER = $$EVENT_NUMBER$$
ORDER BY
GEN_TIME, SSID DESC
FOR READ UNCOMMITTED ACCESS IN SHARE MODE
Example A-4 Search Event Logs for Specific Event Text
This report performs a case-insensitive search for events in which the event text contains the
entered text string and time period.
SELECT
EVENT_NUMBER AS EVENT_NUMBER,
GENERATED_TIMESTAMP_LCT AS GEN_TIME,
SUBSTRING(SUBSTRING(SSID FROM CHAR_LENGTH('TANDEM. '))FOR LOCATE('.' ,SUBSTRING(SSID FROM
CHAR_LENGTH('TANDEM. ')) )-1) AS SUB_SYS,
trim(substring(Text FROM CHAR_LENGTH('00:00 01FEB09 001.01.1000 '))) AS Event_Text,
PROCESS_SEGMENT AS SEGMENT,
TRIM(PROCESS_ID) AS PROCESS_NAME,
NODE_ID AS NODE_ID,
PIN AS PIN,
SEGMENT_ID AS SEGMENT_ID,
SQLCD AS SQLCD,
FSERROR AS FSERROR,
COLLECTOR AS COLLECTOR,
LOG_TIMESTAMP_LCT AS LOG_TIME_LCT,
TEXT AS FULL_TEXT,
SSID
FROM
NEO.HP_METRICS.EVENTS_VW1
WHERE
GENERATED_TIMESTAMP_LCT >= TIMESTAMP '$$__FROM_TIME$$' - interval '1' second and
GENERATED_TIMESTAMP_LCT <= TIMESTAMP '$$__TO_TIME$$' + interval '1' second
AND UPSHIFT(TEXT) LIKE upshift('%$$EVENT_TEXT$$%')
ORDER BY
GEN_TIME DESC
FOR READ UNCOMMITTED ACCESS IN SHARE MODE
69