To examine activity log records, enter a command in the command line to control the amount of scrolling or type of search, and then press a function key to determine the direction of the scrolling or search. Table 6-2 describes the Activity Log Browse commands and how they are used with function keys to examine the activity log.
Examining the Activity Log
Table 6-2. Examining the Activity Log (Page 1 of 3) Scrolling Through the Activity Log
Command 6530 Function Key 3270 Function
Key Amount and Type of Scrolling (blank)
Cursor in command line
F7 PF07 Scrolls backward one page. If the current log position is at TOP-OF-LOG, scrolls backward to the end of the previous day’s log (if data exists).
F8 PF08 Scrolls forward one page. If the current log position is at END-OF-LOG, scrolls forward to top of the next day’s log (if data exists).
(blank)
Cursor on a message line
F7 PF07 Scrolls backward so that message line on which the cursor is positioned is at the bottom of the screen.
F8 PF08 Scrolls forward so that message line on which the cursor is positioned is at the top of the screen.
nn F7 PF07 Scrolls backward nn records. This
command does not cross date boundaries. F8 PF08 Scrolls forward nn records.
M[AX] F7 PF07 Scrolls to the top of the currently displayed day’s log records. This command does not cross date boundaries.
F8 PF08 Scrolls to the end of the currently displayed day’s log records.
Searching Activity Log Records by Date
Command 6530 Function Key 3270 Function
Key Amount and Type of Scrolling or Search D[ATE] F7 PF07 Scrolls to the end of the previous day’s log
records.
F8 PF08 Scrolls to the top of the next day’s log records.
D[ATE] dd-mmm-yy ENTER ENTER Locates the first record in the log for dd-mmm-yy.
D[ATE] +nn ENTER ENTER Locates the first record in the log for the currently-browsed date plus nn days. D[ATE] -nn ENTER ENTER Locates the first record in the log for the
Examining the Activity Log
106379 Tandem Computers Incorporated 6–7
Table 6-2. Examining the Activity Log (Page 2 of 3) Searching Activity Log Records by Time
Command 6530 Function Key 3270 Function
Key Type of Search
T[IME] hh ENTER ENTER Locates the first record for the hour specified for the currently displayed date. T[IME] hh:mm ENTER ENTER Locates the first record for the hour and
minute specified for the currently displayed date.
T[IME] hh:mm:ss ENTER ENTER Locates the first record for the hour, minute, and second specified for the currently displayed date.
Searching the Activity Log by String or Field Value
For all FIND command searches, press F5 (PF05) to continue a paused search or to find the next record that matches the search criterion. Use the PREV option to change the direction of the search.
Command 6530 Function Key 3270 Function
Key Type of Search F[IND] C string [PREV] ENTER
F5
ENTER PF05
Locates a record containing the specified character string, starting with the current screen display.
F[IND] E emphasis [PREV] ENTER F5
ENTER PF05
Locates a record for the given SPI emphasis token. Press F5 (PF05) to continue.
F[IND] M msg-num [PREV] ENTER F5
ENTER PF05
Locates a record for the given SPI message number token. Press F5 (PF05) to continue.
F[IND] N term-name [PREV] F[IND] T term-name [PREV]
ENTER F5
ENTER PF05
Locates a record for the given terminal name. Press F5 (PF05) to continue. F[IND] S domainid [PREV] ENTER
F5
ENTER PF05
Locates a record for the given NonStop NET/MASTER MS domain ID. Press F5 (PF05) to continue.
F[IND] U user-ID [PREV] ENTER F5
ENTER PF05
Locates a record for the given user ID. Press F5 (PF05) to continue.
Examining the Activity Log
Table 6-2. Examining the Activity Log (Page 3 of 3) Marking and Locating a Position in the Activity Log
Command 6530 Function Key 3270 Function
Key Type of Search
.label ENTER ENTER Marks a position in the activity log to later locate with the LOCATE command. L[OCATE] label ENTER ENTER Locates the log record associated with the
specified label.
Changing the Search Scope
Command 6530 Function Key 3270 Function
Key Amount of Scrolling
SCANMAX nn ENTER ENTER Specifies the number of records scanned at one time before a FIND search prompts you for permission to continue.
Browsing Through Another Activity Log File
Command 6530 Function Key 3270 Function
Key Type of Search
S[WAP] LOGFILEn ENTER ENTER Specifies an earlier activity log file to browse.
S[WAP] udb-id ENTER ENTER Specifies an archived or remote activity log file to browse through. You have previously used the UDBCTL OPEN command to open the file with an identifier udb-id.
Searching Activity Log Records by Date
106379 Tandem Computers Incorporated 6–9
Searching Activity Log Records by Date
Issue the DATE command to search through the activity log by date. The syntax for the DATE command is as follows:
D[ATE] [ dd-mmm-yy | +nn | -nn ]
dd-mmm-yy
displays the top of the log records for the specified date if the records are found in the current activity log.
+nn
displays the top of the log for the current date plus nn days.
-nn
displays the top of the log for the current date minus nn days.
Considerations
To display the end of the log for the previous day, enter the DATE command with no operands and press the F7 (PF07) function key.
To display the top of the log for the next day, enter the DATE command with no operands and press the F8 (PF08) function key.
When supplying an operand with the DATE command, press the ENTER key to execute the command.
If the log records for the date you specified are not in the current activity log, use the Log Browse command SWAP to browse another activity log file.
Example
To display the first page of activity log entries for 10 November 1994, enter the following command in the command line and press the ENTER key:
Searching Activity Log Records by Time
The following is an example of the first page of an activity log for 10 November 1994:
14:21:22 --- Log LOGFILE1 (\SYS1.$DATA4.ZNNMDATA.ZLGFILE1) for 10-NOV-1994 ---- COMMAND ==> DISPLAY >> 12:33:40 RANGE >> 12:33:49 TIME TEXT ********************************* TOP-OF-LOG ******************************** 12:33:40 START SETPROF 12:33:41 START SETPROF 12:33:43 START SETPROF 12:33:45 prof roll=0 12:33:45 prof ncltest=yes
12:33:45 NNM1005 START SETPROF PROCESSING COMPLETE. NCLID 002000 12:33:45 NNM0997 INVALID OR MISSING OPERAND
12:33:45 NNM0357 PROFILE HAS CHANGED 12:33:45 prof roll=0
12:33:45 prof ncltest=yes
12:33:45 NNM0222 AUTOHOLD COMMAND NEEDS OCS ENVIRONMENT 12:33:45 NNM0222 AUTOHOLD COMMAND NEEDS OCS ENVIRONMENT
12:33:45 NNM1005 START SETPROF PROCESSING COMPLETE. NCLID 002003 12:33:45 NNM0997 INVALID OR MISSING OPERAND
12:33:45 NNM0357 PROFILE HAS CHANGED
12:33:46 Executing NCL INIT during system initialisation... 12:33:47 STATUS
12:33:49 prof roll=0 12:33:49 prof ncltest=yes
Searching Activity Log Records by Time
Issue the TIME command to search through the activity log by time. The syntax for the TIME command is as follows:
T[IME] { hh | hh:mm | hh:mm:ss }
hh
locates the first record for the hour specified, where hh is in the range 0 through 23.
hh:mm
locates the first record for the hour and minute specified, where hh is in the range 0 through 23 and mm is in the range 0 through 59.
hh:mm:ss
locates the first record for the hour, minute, and second specified, where hh is in the range 0 through 23, mm is in the range 0 through 59, and ss is in the range 0 through 59.
Searching the Activity Log by String or Field Value
106379 Tandem Computers Incorporated 6–11
Example
To display the first page of activity log entries beginning at 13:35 pm for the current date, enter the following command in the command line and press the ENTER key:
T 13:35
The resulting display starts with one record before the requested time, as illustrated in the following example:
14:29:24 --- Log LOGFILE1 (\SYS1.$DATA4.ZNNMDATA.ZLGFILE1) for 10-NOV-1994 ---- COMMAND ==> DISPLAY >> 13:05:17 RANGE >> 13:38:06 TIME TEXT
13:05:17 NNM0652 LOCAL USER NMTJN LOGGED ON AT #9770010 -- MYNAME 13:36:55 NNM0652 LOCAL USER NMTTH LOGGED ON AT #9770011 -- Tina Harrison 13:38:05 START INITCMD
13:38:05 equate zzz show users
13:38:06 NNM0235 TEXT SET FOR EQUATE STRING ZZZ 13:38:06 PROFILE RDMIN=99 13:38:06 PROFILE CMDSTACK=99 13:38:06 PROFILE EMS=YES 13:38:06 PROFILE ROLL=0 13:38:06 PROFILE NCLTEST=YES 13:38:06 PROFILE CMDKEEP=NO 13:38:06 PROFILE TRUNC=NO 13:38:06 PROFILE INDENT=8 13:38:06 PROFILE PREFEMS=BOTH 13:38:06 PROFILE PRFTM=YES 13:38:06 PROFILE UNSOL=YES 13:38:06 PROFILE MONMSG=YES
13:38:06 TITLE OPERATOR CONTROL SERVICES
13:38:06 NNM1005 START INITCMD PROCESSING COMPLETE. NCLID 001002 13:38:06 NNM0357 PROFILE HAS CHANGED
Searching the Activity Log by String or Field Value
Issue the FIND command to search for records that contain a specified string in the message text area or a specified value in a key field.
The syntax for the FIND command is as follows:
F[IND] { C string | E emphasis | M msg-num | N | T term-name | S domainid | U user-ID } [PREV] C string
locates records that contain a matching character string in the message text.
E emphasis
Searching the Activity Log by String or Field Value
M msg-num
locates records that contain a matching ZEMS_TKN_EVENTNUMBER token (may be numeric or symbolic).
N | T term-name
locates records that contain a matching terminal name in the TERM field.
S domainid
locates records that contain a matching NonStop NET/MASTER MS domain ID. The matching domain ID is not displayed.
U user-ID
locates records that contain a matching user ID in the USER field.
Considerations
The search starts at the current cursor position and stops when either: A matching record is found.
For 3270 terminals, if a match is found in the currently displayed screen, the cursor is positioned in the first character of the field.
For 6530 terminals, if a match is found in the currently displayed screen, the cursor is positioned at the start of the matching line.
In both cases, if a match is found in a screen other than the currently displayed screen, the screen is reformatted with the record containing the match at the top of the screen.
Five hundred records (the default) are scanned, and no matching record has been found.
If a match is not found after 500 records are scanned, the search pauses and a message is displayed providing the total number of records read. The times displayed in the top right corner of the screen are updated to reflect the search scope.
To increase or decrease the number of records to be scanned before the search pauses for permission to continue, issue a SCANMAX command. See
“Changing the Search Scope,” later in this section, for more information. To find the next occurrence of a matching record, or to continue a search after it has been paused, press the F5 (PF05) function key.
Use the PREV option to change the direction of the search from forward to backward.
Searching the Activity Log by String or Field Value
106379 Tandem Computers Incorporated 6–13
Examples
To find records containing the string OPER3, enter the following command in the command line and press the ENTER key:
F C OPER3
In this example, the search is paused twice (and continued with the F5 function key) with the following messages before the search is successful:
NNM1532 500 LINES SEARCHED - STRING 'OPER3' NOT FOUND NNM1532 1000 LINES SEARCHED - STRING 'OPER3' NOT FOUND
14:29:24 --- Log LOGFILE1 (\SYS1.$DATA4.ZNNMDATA.ZLGFILE1) for 10-NOV-1994 ---- COMMAND ==> DISPLAY >> 13:05:17 NNM1537 STRING 'OPER3' FOUND RANGE >> 13:38:06 TEXT
NNM0765 PASSWORD CHANGED FOR OPER3
NNM0672 YOUR SESSION -SYSMAN- ENDED ON TERMINAL #5561887 NNM0654 LOCAL USER SYSMAN LOGGED OFF FROM #5561887
NNM0652 LOCAL USER OPER3 LOGGED ON AT #5561888 -- Christine Lang NNM0765 PASSWORD CHANGED FOR OPER3
START INITCMD PROFILE RDMIN=99 PROFILE CMDSTACK=99 PROFILE EMS=YES PROFILE ROLL=0 PROFILE NCLTEST=YES PROFILE CMDKEEP=NO PROFILE TRUNC=NO PROFILE INDENT=8 PROFILE PREFEMS=BOTH PROFILE PRFTM=YES PROFILE UNSOL=YES PROFILE MONMSG=YES
TITLE OPERATOR CONTROL SERVICES NNM0357 PROFILE HAS CHANGED
Marking and Locating a Position in the Activity Log
To find the records generated from the terminal #9770012, enter the following command in the command line and press the ENTER key:
F T #9770012
14:36:52 --- Log LOGFILE1 (\SYS1.$DATA4.ZNNMDATA.ZLGFILE1) for 10-NOV-1994 ---- COMMAND ==> DISPLAY >> 13:50:32 NNM1537 TERM '#9770012' FOUND RANGE >> 13:50:33 TIME TERM USER TEXT
13:50:32 #9770012 NMTJN START INITCMD
13:50:33 #9770012 NMTJN equate zzz show users
13:50:33 #9770012 NMTJN NNM0235 TEXT SET FOR EQUATE STRING ZZZ 13:50:33 #9770012 NMTJN PROFILE RDMIN=99 13:50:33 #9770012 NMTJN PROFILE CMDSTACK=99 13:50:33 #9770012 NMTJN PROFILE EMS=YES 13:50:33 #9770012 NMTJN PROFILE ROLL=0 13:50:33 #9770012 NMTJN PROFILE NCLTEST=YES 13:50:33 #9770012 NMTJN PROFILE CMDKEEP=NO 13:50:33 #9770012 NMTJN PROFILE TRUNC=NO 13:50:33 #9770012 NMTJN PROFILE INDENT=8 13:50:33 #9770012 NMTJN PROFILE PREFEMS=BOTH 13:50:33 #9770012 NMTJN PROFILE PRFTM=YES 13:50:33 #9770012 NMTJN PROFILE UNSOL=YES 13:50:33 #9770012 NMTJN PROFILE MONMSG=YES
13:50:33 #9770012 NMTJN TITLE OPERATOR CONTROL SERVICES
13:50:33 #9770012 NMTJN NNM1005 START INITCMD PROCESSING COMPLETE. NCLID 001502
13:50:33 #9770012 NMTJN NNM0357 PROFILE HAS CHANGED 13:50:33 #9770012 NMTJN NNM0357 PROFILE HAS CHANGED
Marking and Locating a Position in the Activity Log
You can mark a position in the activity log and then use the LOCATE command to return directly to that position.
Marking a Position
To mark a position, follow these steps:
1. Enter a period (.) followed by a one to eight-character label in the command line:
.label
2. Perform one of the following steps:
Press the ENTER key to associate the first record displayed on the screen with the specified label.
Position the cursor to the left of the line you wish to be associated with the label and then press the ENTER key.
Any number of labels may be defined, and a previously used label may be redefined to a new position.
Locating a Position
106379 Tandem Computers Incorporated 6–15
Locating a Position
To return to a previously marked position in the activity log, issue a LOCATE command:
L[OCATE] label
where label is the previously marked position you wish to return to.
The LOCATE command searches backward and forward across date boundaries for the specified label.
Example
In this example, the operator marks a message beginning with TAC with the label .TAC. The operator does so by entering the label in the command line and positioning the cursor to the left of the logged TAC message, as shown in the following screen:
14:29:24 --- Log LOGFILE1 (\SYS1.$DATA4.ZNNMDATA.ZLGFILE1) for 10-NOV-1994 ---- COMMAND ==> .TAC DISPLAY >> 00:00:34 RANGE >> 06:30:57 TIME TEXT
00:00:34 SX10042 PU : \SYS1.$SNA02.#EM3270 NOT READY, ERROR # 66 00:00:35 SX10023 LDEV 0029 LINE NOT READY, ERROR #066
00:00:35 EMS0150 LDEV 0064 CU %232 CSS ACTIVATE PATH, CIU A %000026 %100420 _ 06:27:45 TAC0001 TACL TERMINAL I/O ERROR 162, $ATP2.#TERM1
06:30:47 EMS0150 LDEV 0064 CU %230 CSS ACTIVATE PATH, CIU A %000025 %100420 06:30:49 SX10022 LDEV 0029 LINE READY
06:30:52 SX10041 PU : \SYS1.$SNA02.#SNAVIEW CONTACTED 06:30:55 SX10041 PU : \SYS1.$SNA02.#EM3270 CONTACTED
06:30:55 SX10061 LDEV 0029 LU - #TERM01 , ACTIVE ,STATUS 000003 06:30:56 SX10061 LDEV 0029 LU - #TERM02 , ACTIVE ,STATUS 000003 06:30:56 SX10061 LDEV 0029 LU - #TERM03 , ACTIVE ,STATUS 000003 06:30:56 SX10061 LDEV 0029 LU - #TERM04 , ACTIVE ,STATUS 000003 06:30:56 SX10061 LDEV 0029 LU - #TERM05 , ACTIVE ,STATUS 000003 06:30:56 SX10061 LDEV 0029 LU - #TERM06 , ACTIVE ,STATUS 000003 06:30:56 SX10061 LDEV 0029 LU - #TERM07 , ACTIVE ,STATUS 000003 06:30:56 SX10061 LDEV 0029 LU - #TERM08 , ACTIVE ,STATUS 000003 06:30:57 SX10061 LDEV 0029 LU - #TERM09 , ACTIVE ,STATUS 000003 06:30:57 SX10061 LDEV 0029 LU - #TERM10 , ACTIVE ,STATUS 000003 06:30:57 SX10061 LDEV 0029 LU - #TERM11 , ACTIVE ,STATUS 000003 06:30:57 SX10061 LDEV 0029 LU - #TERM12 , ACTIVE ,STATUS 000003
Changing the Search Scope
The following screen is displayed when the ENTER key is pressed:
14:29:24 --- Log LOGFILE1 (\SYS1.$DATA4.ZNNMDATA.ZLGFILE1) for 10-NOV-1994 ---- COMMAND ==> DISPLAY >> 06:27:45 NNM1541 LABEL 'TAC' DEFINED RANGE >> 06:30:57 TIME TEXT
06:27:45 TAC0001 TACL TERMINAL I/O ERROR 162, $ATP2.#TERM1
06:30:47 EMS0150 LDEV 0064 CU %230 CSS ACTIVATE PATH, CIU A %000025 %100420 06:30:49 SX10022 LDEV 0029 LINE READY
06:30:52 SX10041 PU : \SYS1.$SNA02.#SNAVIEW CONTACTED 06:30:55 SX10041 PU : \SYS1.$SNA02.#EM3270 CONTACTED
06:30:55 SX10061 LDEV 0029 LU - #TERM01 , ACTIVE ,STATUS 000003 06:30:56 SX10061 LDEV 0029 LU - #TERM02 , ACTIVE ,STATUS 000003 06:30:56 SX10061 LDEV 0029 LU - #TERM03 , ACTIVE ,STATUS 000003 06:30:56 SX10061 LDEV 0029 LU - #TERM04 , ACTIVE ,STATUS 000003 06:30:56 SX10061 LDEV 0029 LU - #TERM05 , ACTIVE ,STATUS 000003 06:30:56 SX10061 LDEV 0029 LU - #TERM06 , ACTIVE ,STATUS 000003 06:30:56 SX10061 LDEV 0029 LU - #TERM07 , ACTIVE ,STATUS 000003 06:30:56 SX10061 LDEV 0029 LU - #TERM08 , ACTIVE ,STATUS 000003 06:30:57 SX10061 LDEV 0029 LU - #TERM09 , ACTIVE ,STATUS 000003 06:30:57 SX10061 LDEV 0029 LU - #TERM10 , ACTIVE ,STATUS 000003 06:30:57 SX10061 LDEV 0029 LU - #TERM11 , ACTIVE ,STATUS 000003 06:30:57 SX10061 LDEV 0029 LU - #TERM12 , ACTIVE ,STATUS 000003 06:30:57 SX10061 LDEV 0029 LU - #TERM13 , ACTIVE ,STATUS 000003 06:30:57 SX10061 LDEV 0029 LU - #TERM14 , ACTIVE ,STATUS 000003 06:30:57 SX10061 LDEV 0029 LU - #TERM15 , ACTIVE ,STATUS 000003
The following command locates the record identified with the label TAC:
L TAC Changing the Search
Scope
You can change the search scope of the FIND command in two ways: By modifying the number of records to be searched at one time By limiting the search to a specific area of the activity log
Modifying the Number of Records to Be Searched
By default, when you start a search in the Activity Log Browse facility, the search pauses if no match is found after 500 records have been scanned. The SCANMAX command allows you to specify a larger or smaller number of records (between 1 and 5000) to be scanned before your search pauses:
SCANMAX nn
where nn is a number between 1 and 5000.
For example, the following command causes each search to scan through 1000 messages before pausing:
Browsing Through Another Activity Log File
106379 Tandem Computers Incorporated 6–17
Defining the Region to Be Searched
You can limit the search to a specific area of the activity log by assigning beginning and ending labels, FSTART and FEND, to define the region you wish to be searched. This region must be within a date boundary.
By default, the top of the displayed day’s activity log is assigned the label FSTART, and the end of the displayed day’s activity log is assigned the label FEND.
When you begin a search, the search starts at the record at the top of the currently displayed screen or at the record at which the cursor is positioned. The implicit FSTART label is redefined to this position if it is earlier in the log than the current FSTART label. Normally, the current FSTART label marks the top of the day’s log, and redefinition cannot occur. However, if you have previously used the FSTART command to reposition the FSTART label to somewhere within the day’s log, then redefinition may occur.
The search continues forward or backward across date boundaries, pausing every nn records according to the SCANMAX value, until the end or the top of the activity log is reached. As the search crosses a date boundary, the FSTART and the FEND labels are repositioned to the new day’s log.
If the end of the activity log is reached, press the F5 (PF05) function key to resume the search at the FSTART position: that is, at the start of the last day’s log.
If PREV is specified in the FIND command and the top of the activity log is reached, the search does not wrap around again.
You can explicitly assign FSTART and FEND labels to any records in a day’s log to define new upper and lower boundaries for the search within the day.