We just want to figure out how it comes that records are deleted and
who did it. So we have the log file, which is 500 MB in size and don't
now how to open this file.
The main problem is that there is no editor which can handle this
filesize so my question is if there is a Log Analyzer for the log
If not, are there other application for opening these log files?
Thank you very much in advance.
Subject: Log analyzing?
Date: Wed, 20 Jun 2007 04:29:54 -0700
Content-Type: text/plain; charset="iso-8859-1"
X-Trace: posting.google.com 1182338994 10367 127.0.0.1 (20 Jun 2007 11:29:54 GMT)
NNTP-Posting-Date: Wed, 20 Jun 2007 11:29:54 +0000 (UTC)
X-HTTP-UserAgent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; .NET CLR 1.1.4322; .NET CLR 2.0.50727; .NET CLR 3.0.04506.30),gzip(gfe),gzip(gfe)
Injection-Info: q75g2000hsh.googlegroups.com; posting-host=18.104.22.168; posting-account=QBWe2wwAAAA5AbHbH3LqfHnukGww-u5x
Xref: forums-1-dub ianywhere.public.general:7288
Article PK: 5505
User-Agent: Thunderbird 22.214.171.124 (Windows/20081105)
Subject: Re: Log analyzing?
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Date: 22 Dec 2008 07:12:43 -0800
X-Trace: forums-1-dub 1229958763 10.22.241.152 (22 Dec 2008 07:12:43 -0800)
X-Original-Trace: 22 Dec 2008 07:12:43 -0800, vip152.sybase.com
Xref: forums-1-dub ianywhere.public.general:7293
Article PK: 5506
Is this the transaction log you're referring to or a console /
If you're looking at viewing the contents of the transaction log, you'll
first have to translate it to a text file using the "dbtran" utility:
If you have just a text file and if you don't have a very powerful
text-editor, you can split text files using other utilities such as the
"split" command (found on Linux/UNIX). If you're using Windows, there's
a port of it found here: http://sourceforge.net/projects/unxutils
The syntax is:
split <-l line #s> <infile> <prefix>
split -l 1000 mybigfile.txt bigfile
Jeff Albion, SQL Anywhere Engineering
iAnywhere Developer Community :
iAnywhere Documentation : http://www.ianywhere.com/developer/product_manuals
SQL Anywhere Patches and EBFs :
Subject: Re: Log analyzing?
X-Newsreader: Microsoft Outlook Express 6.00.2900.2869
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2962
X-RFC2646: Format=Flowed; Original
Date: 22 Dec 2008 07:21:47 -0800
X-Trace: forums-1-dub 1229959307 10.22.241.152 (22 Dec 2008 07:21:47 -0800)
X-Original-Trace: 22 Dec 2008 07:21:47 -0800, vip152.sybase.com
Xref: forums-1-dub ianywhere.public.general:7294
Article PK: 5508
If you have not done so already you should use the dbtran
utility to translate that into SQL. Then you can use the
platform's FIND/grep utility to extract the table operations
you are interested in.
If you have a thought which accounts may have been involved
you can filter on just those accounts [see: dbtran -u user1,...].
Since you do know which tables to look for you can translate
just for operations on those tables [see: dbtran -it table1,....]
If you know roughly when this occurred you can translate
just part of the transaction log [see: dbtran switches -ir, -f
and/or -j time].
Also don't just look for deletes. Updates of primary keys
are just as good as a delete, when you cannot find a particular
row. Updates and Deletes on tables that have cascading
RI declarations could also have a similar impact. Also
rolled back inserts and inserts that failed to be replicated or
synchronized could have the same appearance as a delete.