Neoview User Management and Security Administration Guide (R2.5)

Table 5-21 VIEW NEO.HP_SECURITY.SYSUSERLOG (continued)
Example of ValueDescriptionTypeField Name
SUPER.SUPERPlatform role, one of:
SUPER.SUPER
SUPER.SERVICES
HP.SDI
HP.VTS
or NULL if the action was
to delete the user
CHAR(17)PARTICIPANT
User createdDescription of the action,
one of
User created
User deleted
Password changed
Successful Login to
Database
Successful Login to Event
Viewer
Failed Login
CHAR(50)TYPE
Adm-REG5User name of the person
who made the change, or
NULL if the action was a
successful or failed login
CHAR(128)ACTION_USER
Example Queries
This query lists all records for instances in which the user identified by name Adm-REG5 changed
a password.
SQL>select * from HP_SECURITY.SYSUSERLOG where TYPE = 'Password changed' and ACTION_USER = 'Adm-REG5';
This query reveals who last changed the ROLE.SECMGR password (as opposed to the password
associated with a ROLE.SECMGR user):
SQL>select ACTION_USER from HP_SECURITY.SYSUSERLOG where SUBJECT = 'ROLE.SECMGR' order by DATE_TIME Desc;
This query displays the 4 most recent actions pertaining to platform users, with the most recent
action listed first:
SQL>select [first 4] date_time, substring(user_name,1,15) as username, substring(user_type,1,15) as participant,
substring(type,1,15) as type, substring(action_user,1,15) as action_user from hp_security.sysuserlog order by
date_time desc;
DATE_TIME USERNAME USER_TYPE TYPE ACTION_USER
-------------------------- --------------- --------------- --------------- ---------------
2009-09-03 16:42:51.219336 HPSUPPORT SUPER.SERVICES Successful Logi HPSUPPORT
2009-09-03 16:42:50.465839 SUPERUSER SUPER.SUPER Successful Logi SUPERUSER
2009-09-03 16:42:44.525326 alias_oneillc_s ROLE.SECMGR Successful Logi alias_oneillc_s
2009-09-03 16:42:44.315355 SECURITYMGR ROLE.SECMGR Failed Login SECURITYMGR
User Access Log for Database and Platform Users (HP_SECURITY.USERACCESSLOG)
The user access log view (USERACCESSLOG) consists of one row for each user-management
action, whether the user is a database user or a platform user. For each action, the view indicates
what the action was and when it occurred, the user or role to which the action applies, the user's
role if the action pertained to a user, and the name of the user who took the action.
Column Definitions
Each row consists of the following columns:
128 User and Role Management