Hi Richard, you did it.

My final query string is:

select nodename,substr(char(date_time), 1, 16) as "TME",message from actlog \
where (msgno=4005 or msgno=4007 or msgno=4018 or msgno=4037 or msgno=4987) \
and nodename in (select node_name from nodes where domain_name='MAC') \
and CAST((CURRENT_TIMESTAMP-DATE_TIME) HOURS AS INTEGER) < 48 \
order by nodename 

Kind regards
Stefan Holzwarth

> -----Ursprüngliche Nachricht-----
> Von: ADSM: Dist Stor Manager [mailto:ADSM-L AT VM.MARIST DOT EDU] Im 
> Auftrag von Richard Sims
> Gesendet: Dienstag, 22. Mai 2007 13:19
> An: ADSM-L AT VM.MARIST DOT EDU
> Betreff: Re: TSM Oper. Report for Missed Files
> 
> On May 22, 2007, at 3:11 AM, Stefan Holzwarth wrote:
> 
> > "and nodename in (select nodename from nodes where
> > domain_name='MAC') "
> 
>                             ^^^^^^^
> That should instead be:    NODE_NAME
> 
> Note well the unfortunate field name variations across tables.
> 
> > 2) since the original query above works with date strings I have to
> > substitute that part with something like that being using 
> in q actlog
> > begind=-24:00 ...
> 
> I think you mean   begint=-24:00
> 
> The Select prototype would be:
>   SELECT * From ACTLOG where  -
>    CAST((CURRENT_TIMESTAMP-DATE_TIME) HOURS AS INTEGER) < 24
> 
>   Richard Sims
>