Identify the user who deleted a record from a table in IBM DB2?

[Kishor Sonawane]

Hi - Can we identify the user who deleted a record from a table in IBM DB2? What is command to get it or do we need to do some setup before we can get this information. Please advise.

[Anuj Dhawan]

If you've audit facility turned ON beforehand prior to record being deleted, you might capture it. The audit trace enables you to trace different events or categories of events by authorization IDs, object ownership, and so on. And when you start the trace, you choose the events to audit by specifying one or more audit classes. Description of them can be found here:

https://www.ibm.com/support/knowledgece ... trace.html

OTOH, if you some tools like CA Log Analyzer or Platinum Tool - they might also allow you to look for such an information but I can not confirm for sure.

[Kishor Sonawane]

Thanks Anuj.

Can we get some information from DB2 logs too?

[Anuj Dhawan]

Logs would not really give information on "who did it" but "what happened" can be answered mostly, AFAIK.

[Kishor Sonawane]

Thanks Anuj.

[Anuj Dhawan]

You're welcome.