HP Neoview Release 2.4 Software - Manual (Page 80)

Example A-7 Search Event Logs for a Query ID
This report searches event text for a full or partial query_id during a given time period.
SELECT
EVENT_NUMBER AS EVENT_NUMBER,
GENERATED_TIMESTAMP_LCT AS GEN_TIME,
SUBSTRING(SUBSTRING(SSID FROM CHAR_LENGTH('TANDEM. '))FOR LOCATE('.' ,SUBSTRING(SSID FROM
CHAR_LENGTH('TANDEM. ')) )-1) AS SUB_SYS,
trim(substring(Text FROM CHAR_LENGTH('00:00 01FEB09 001.01.1000 '))) AS Event_Text,
PROCESS_SEGMENT AS SEGMENT,
TRIM(PROCESS_ID) AS PROCESS_NAME,
NODE_ID AS NODE_ID,
PIN AS PIN,
SEGMENT_ID AS SEGMENT_ID,
SQLCD AS SQLCD,
FSERROR AS FSERROR,
COLLECTOR AS COLLECTOR,
LOG_TIMESTAMP_LCT AS LOG_TIME_LCT,
TEXT AS FULL_TEXT,
SSID
FROM
NEO.HP_METRICS.EVENTS_VW1
WHERE
GENERATED_TIMESTAMP_LCT >= TIMESTAMP '$$__FROM_TIME$$' - interval '1' second and
GENERATED_TIMESTAMP_LCT <= TIMESTAMP '$$__TO_TIME$$' + interval '1' second
AND UPSHIFT(TEXT) LIKE UPSHIFT('%$$QUERY_ID$$%')
ORDER BY
GEN_TIME DESC
FOR READ UNCOMMITTED ACCESS IN SHARE MODE
/*QueryDocumentationStart
(C) COPYRIGHT 2010 HEWLETT-PACKARD DEVELOPMENT COMPANY, LP.
QueryTitle: Search EMS for Query ID
Application: Neoview Reports, HPDM
QueryStyleRevNum: S2.0
ReposRevNum: R2.4 SP2
QueryRevNum:Q1
QueryShortDesc:
This report searches EMS event text for a full or partial query_id during a time period.
The submitter is prompted to enter the time period and query_id.
All events containing a matching query_id will be returned.
Results are listed in descending event generation time order.
Prompts:
QUERY_ID = Case insensitive full or partial query_id
__FROM_TIME = the starting time period to summarize
__TO_TIME = The ending time period to summarize
Columns Returned:
EVENT_NUMBER = Event number of the event. Note that event numbers are unique only within a given subsystem;
that is two subsystems may reuse the same event number to describe two different events.
GENERATED_TIMESTAMP_LCT = The time the event was generated (in Local Civil Time)
SUB_SYS = Shortened version of the subsystem id.
EVENT_TEXT = Event text details with leading date and time removed.
SEGMENT = [segment name>] of the process that generated the event
PROCESS_NAME = [segment name].[process name] of the process that generated the event
NODE_ID = CPU (Processing node) number of the process that generated the event
PIN = Process ID number
SQL_CD = For events pertaining to SQL errors, this is the SQL error code. Null for other events.
FSERROR = File system error; populated only for SQL errors that have file system errors. Null for other
events
COLLECTOR = The name of the EMS collector where this event was logged (without a segment name).
LOG_TIME_LCT = The time at which the event was placed in the EMS log (in Coordinated Universal Time).
FULL_TEXT = The text description of the EMS event including leading date time.
SSID = Full Subsystem ID of the subsystem that generated the event.
Views Used: EVENTS_VW1
QueryDocumentationEnd*/
80 Sample Queries for Event Information