First, delete previous delimiter files which were offloaded from the archive log. This can be regenerated.
1 2 3 |
rm /dbawork/auditarch/delfile/*.del db2audit flush |
Below command will archive Instance level activities.
1 |
db2audit archive to /dbawork/auditarch |
Below command will archive database level activities.
1 2 3 4 5 6 7 8 |
db2audit archive database COREDB to /dbawork/auditarch Member DB Partition AUD Archived or Interim Log File Number Number Message -------- -------------- -------- ------------------------ 0 0 AUD0000I db2audit.db.COREDB.log.0.20180206131146 AUD0000I Operation succeeded. |
Note: Do not delete the file created by command-line “db2audit archive”
1 |
db2audit extract delasc to /dbawork/auditarch/delfile from files /dbawork/auditarch/db2audit.instance.log.0.20180710164046 |