Sybase NNTP forums - End Of Life (EOL)

The NNTP forums from Sybase - forums.sybase.com - are now closed.

All new questions should be directed to the appropriate forum at the SAP Community Network (SCN).

Individual products have links to the respective forums on SCN, or you can go to SCN and search for your product in the search box (upper right corner) to find your specific developer center.

Log analyzing?

3 posts in General Discussion Last posting was on 2008-12-22 15:21:47.0Z
Timur Zanagar Posted on 2007-06-20 11:29:54.0Z
From: Timur Zanagar <zanagar@clockworkz.de>
Newsgroups: ianywhere.public.general
Subject: Log analyzing?
Date: Wed, 20 Jun 2007 04:29:54 -0700
Organization: http://groups.google.com
Lines: 14
Message-ID: <1182338994.269978.283090@q75g2000hsh.googlegroups.com>
NNTP-Posting-Host: 84.161.45.114
Mime-Version: 1.0
Content-Type: text/plain; charset="iso-8859-1"
X-Trace: posting.google.com 1182338994 10367 127.0.0.1 (20 Jun 2007 11:29:54 GMT)
X-Complaints-To: groups-abuse@google.com
NNTP-Posting-Date: Wed, 20 Jun 2007 11:29:54 +0000 (UTC)
User-Agent: G2/1.0
X-HTTP-UserAgent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; .NET CLR 1.1.4322; .NET CLR 2.0.50727; .NET CLR 3.0.04506.30),gzip(gfe),gzip(gfe)
Complaints-To: groups-abuse@google.com
Injection-Info: q75g2000hsh.googlegroups.com; posting-host=84.161.45.114; posting-account=QBWe2wwAAAA5AbHbH3LqfHnukGww-u5x
Path: forums-1-dub!forums-master!newswest.sybase.com!newsfeed2.dallas1.level3.net!news.level3.com!postnews.google.com!q75g2000hsh.googlegroups.com!not-for-mail
Xref: forums-1-dub ianywhere.public.general:7288
Article PK: 5505

Hi,

We just want to figure out how it comes that records are deleted and
who did it. So we have the log file, which is 500 MB in size and don't
now how to open this file.

The main problem is that there is no editor which can handle this
filesize so my question is if there is a Log Analyzer for the log
files?

If not, are there other application for opening these log files?

Thank you very much in advance.


Jeff Albion (Sybase iAnywhere) Posted on 2008-12-22 15:12:43.0Z
From: "Jeff Albion (Sybase iAnywhere)" <firstname.lastname@ianywhere.com>
User-Agent: Thunderbird 2.0.0.18 (Windows/20081105)
MIME-Version: 1.0
Newsgroups: ianywhere.public.general
Subject: Re: Log analyzing?
References: <1182338994.269978.283090@q75g2000hsh.googlegroups.com>
In-Reply-To: <1182338994.269978.283090@q75g2000hsh.googlegroups.com>
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 7bit
NNTP-Posting-Host: vip152.sybase.com
X-Original-NNTP-Posting-Host: vip152.sybase.com
Message-ID: <494fae6b$1@forums-1-dub>
Date: 22 Dec 2008 07:12:43 -0800
X-Trace: forums-1-dub 1229958763 10.22.241.152 (22 Dec 2008 07:12:43 -0800)
X-Original-Trace: 22 Dec 2008 07:12:43 -0800, vip152.sybase.com
Lines: 44
X-Authenticated-User: techsupp
Path: forums-1-dub!not-for-mail
Xref: forums-1-dub ianywhere.public.general:7293
Article PK: 5506

Timur,

Timur Zanagar wrote:
> We just want to figure out how it comes that records are deleted and
> who did it. So we have the log file, which is 500 MB in size and don't
> now how to open this file.
>
> The main problem is that there is no editor which can handle this
> filesize so my question is if there is a Log Analyzer for the log
> files?
>
> If not, are there other application for opening these log files?

Is this the transaction log you're referring to or a console /
request-level log?

If you're looking at viewing the contents of the transaction log, you'll
first have to translate it to a text file using the "dbtran" utility:
http://dcx.sybase.com/1100en/dbadmin_en11/dbtran.html

---

If you have just a text file and if you don't have a very powerful
text-editor, you can split text files using other utilities such as the
"split" command (found on Linux/UNIX). If you're using Windows, there's
a port of it found here: http://sourceforge.net/projects/unxutils

The syntax is:
split <-l line #s> <infile> <prefix>

e.g.
split -l 1000 mybigfile.txt bigfile

Regards,

--
Jeff Albion, SQL Anywhere Engineering
Sybase iAnywhere

iAnywhere Developer Community :
http://www.sybase.com/developer/library/sql-anywhere-techcorner
iAnywhere Documentation : http://www.ianywhere.com/developer/product_manuals
SQL Anywhere Patches and EBFs :
http://downloads.sybase.com/swd/summary.do?baseprod=144&client=ianywhere&timeframe=0


"Nick Elson [Sybase iAnywhere]" < Posted on 2008-12-22 15:21:47.0Z
From: "Nick Elson [Sybase iAnywhere]" <@nick@.@elson@@sybase@.@com@>
Newsgroups: ianywhere.public.general
References: <1182338994.269978.283090@q75g2000hsh.googlegroups.com>
Subject: Re: Log analyzing?
Lines: 40
X-Priority: 3
X-MSMail-Priority: Normal
X-Newsreader: Microsoft Outlook Express 6.00.2900.2869
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2962
X-RFC2646: Format=Flowed; Original
NNTP-Posting-Host: vip152.sybase.com
X-Original-NNTP-Posting-Host: vip152.sybase.com
Message-ID: <494fb08b$1@forums-1-dub>
Date: 22 Dec 2008 07:21:47 -0800
X-Trace: forums-1-dub 1229959307 10.22.241.152 (22 Dec 2008 07:21:47 -0800)
X-Original-Trace: 22 Dec 2008 07:21:47 -0800, vip152.sybase.com
X-Authenticated-User: techsupp
Path: forums-1-dub!not-for-mail
Xref: forums-1-dub ianywhere.public.general:7294
Article PK: 5508

If you have not done so already you should use the dbtran
utility to translate that into SQL. Then you can use the
platform's FIND/grep utility to extract the table operations
you are interested in.

If you have a thought which accounts may have been involved
you can filter on just those accounts [see: dbtran -u user1,...].
Since you do know which tables to look for you can translate
just for operations on those tables [see: dbtran -it table1,....]

If you know roughly when this occurred you can translate
just part of the transaction log [see: dbtran switches -ir, -f
and/or -j time].

Also don't just look for deletes. Updates of primary keys
are just as good as a delete, when you cannot find a particular
row. Updates and Deletes on tables that have cascading
RI declarations could also have a similar impact. Also
rolled back inserts and inserts that failed to be replicated or
synchronized could have the same appearance as a delete.

"Timur Zanagar" <zanagar@clockworkz.de> wrote in message
news:1182338994.269978.283090@q75g2000hsh.googlegroups.com...
> Hi,
>
> We just want to figure out how it comes that records are deleted and
> who did it. So we have the log file, which is 500 MB in size and don't
> now how to open this file.
>
> The main problem is that there is no editor which can handle this
> filesize so my question is if there is a Log Analyzer for the log
> files?
>
> If not, are there other application for opening these log files?
>
> Thank you very much in advance.
>