How can i log restore actions...

[gdurmus]

In our military project we have just used TSM Server / Client version 5.2. Logging the restore actions (file, db, exchange restores) is very important for our customers. When we contact to local ibm customer support team they said that "there is no way to log restore actions". Although tihs we continued resaerch and found TRACEFLAGs, when we just set it AUDIT in DSM.OPT we can get restored object list. But this was not accepted by our customers, they want to log RESTORE_DATE also.



Finally, we have just decided to develop a new backup and restore client for all interfaces (file, db, exchange). So I know that this solution is nonsense! There must a way to restore all restore actions... In TSM db there is a table named "RESTORES". Our ibm customer support team don't know how it can use (I think they don't have enough knowledge to be a consultant.)...



I think you help us, or contact related team.



Thank for everythings...

 

[tom.s]

Gdurmus,



there is probably a much better way of doing it than this, but, if you add the "fileops" flag to your trace you will get a log of all of the file operations that go with the restore ( or backup ) with a timestamp.



An example of the output of this trace is copied below.......



Restoring ==> \\gbpc0003\c$\1.txt

05/25/2005 09:50:45.750 : ntfileio.cpp (8048): NTObjAccess(): entry: file 'C:\1.txt', requested access mode FIO_ACCESS_WRITE

05/25/2005 09:50:45.750 : ntfileio.cpp (8205): NTObjAccess(): Checking write access to file 'C:\1.txt' ...

05/25/2005 09:50:45.750 : ntfileio.cpp (8048): NTObjAccess(): entry: file 'C:', requested access mode FIO_ACCESS_EXIST

05/25/2005 09:50:45.750 : ntfileio.cpp (4732): fioFileExists(C: Entry.

05/25/2005 09:50:45.750 : ntfileio.cpp (8065): NTObjAccess(): Object 'C:' exists.

05/25/2005 09:50:45.750 : ntfileio.cpp (5644): HlOpen(): Opening file 'C:\1.txt' in Non-Shared mode for write with replace.

05/25/2005 09:50:45.750 : ntfileio.cpp (5798): HlOpen(): File successfully openened, seqNum: 0

05/25/2005 09:50:45.750 : ntsecurity.cpp ( 213): NtSecurityOpen(C:\1.txt): Entry.

05/25/2005 09:50:45.750 : ntsecurity.cpp ( 288): NtSecurityOpen(): Opening 'C:\1.txt' to write Security Data, seqNum: 0.0

05/25/2005 09:50:45.750 : ntsecurity.cpp ( 644): NtSecurityWrite(C:\1.txt): Entry.

05/25/2005 09:50:45.750 : ntsecurity.cpp ( 702): NtSecurityWrite(): Extracted a 264 byte security SDB,write deferred until HLClose()

05/25/2005 09:50:45.750 : ntsecurity.cpp ( 736): NtSecurityClose(C:\1.txt): Entry.

05/25/2005 09:50:45.750 : ntsecurity.cpp ( 742): NtSecurityClose(): Closing seqNum: 0.0

05/25/2005 09:50:45.750 : ntsecurity.cpp ( 749): NtSecurityClose(): Security Information Write Pending.

05/25/2005 09:50:45.750 : ntfileio.cpp (6296): FileOpen(): Opening 'C:\1.txt'

05/25/2005 09:50:45.750 : ntfileio.cpp (6362): FileOpen(): setting compression for 'C:\1.txt'

05/25/2005 09:50:45.750 : ntfileio.cpp (6452): FileOpen(): Open Successful, seqNum: 0.0

05/25/2005 09:50:45.750 : ntfileio.cpp (6585): FileRead(C:\1.txt): Entry.

05/25/2005 09:50:45.750 : ntfileio.cpp (6594): FileWrite(): Writing 2187 bytes to seqNum: 0.0

05/25/2005 09:50:45.750 : ntfileio.cpp (6682): FileWrite(): ... wrote 2187 bytes

05/25/2005 09:50:45.750 : ntfileio.cpp (6798): FileClose(): Closing seqNum: 0.0, filePtr: hi=0 lo=2187

05/25/2005 09:50:45.750 : ntfileio.cpp (5856): HlClose(): Closing seqNum: 0

05/25/2005 09:50:45.750 : ntfileio.cpp (5901): HlClose(): Resetting original date/time ...

05/25/2005 09:50:45.750 : ntfileio.cpp (5966): HlClose(): Original date/time reset.

05/25/2005 09:50:45.750 : ntfileio.cpp (6062): HlClose(): Resetting original standard attributes ...

05/25/2005 09:50:45.750 : ntfileio.cpp (6075): HlClose(): Original standard attributes reset.

05/25/2005 09:50:45.750 : ntfileio.cpp (6082): HlClose(): Resetting original NTFS Security Attributes ...

05/25/2005 09:50:45.750 : ntfileio.cpp (6089): HlClose(): Original NTFS Security Attributes Reset.

Restored ==> \\gbpc0003\c$\1.txt

 

[gdurmus]

thank you very much Tom!

I will discuss , i hope they accept...