try this , I use this as a startingpoint to search for failures
 SELECT ACTLOG.DATE_TIME, ACTLOG.MESSAGE, ACTLOG.SEVERITY  FROM ACTLOG ACTLOG  
WHERE (ACTLOG.SEVERITY='E')  and  (ACTLOG.DATE_TIME>{ts (current date
-1 day, '21:00:00')})
"Joseph Dawes" <jdawes AT CHUBB DOT COM>@VM.MARIST.EDU> on 04/16/2002 03:34:23 
PM
"Joseph Dawes" <jdawes AT CHUBB DOT COM>@VM.MARIST.EDU> on 04/16/2002 03:34:23 
PM

Please respond to "ADSM: Dist Stor Manager" <ADSM-L AT VM.MARIST DOT EDU>

Sent by:  "ADSM: Dist Stor Manager" <ADSM-L AT VM.MARIST DOT EDU>


To:   ADSM-L AT VM.MARIST DOT EDU
cc:

Subject:  Re: Daily Backup Report


so how do you track failures



                    Mark Bertrand
                    <Mark.Bertrand@USUN       To:     ADSM-L AT VM.MARIST DOT 
EDU
                    WIRED.COM>                cc:
                    Sent by: "ADSM:           Subject:     Re: Daily Backup
Report
                    Dist Stor Manager"
                    <[email protected]
                    DU>


                    04/16/02 03:29 PM
                    Please respond to
                    "ADSM: Dist Stor
                    Manager"






I hate to correct IBM again... My statement was correct

>>
query event will NOT tell you if your backup was successful.
<<

As Andy so carefully stated in his last comment:

>>
you should not have any problems determining success or failure of the
operation.
<<

The operation and the actual successful backup are two different things. In
referring to a TSM operations (i.e. ACTION=INCREMENTAL), not a script, can
show proof of missed files and errors from reports from my activity log
that
a "success of the operation" does not mean that you had a successful
backup.
I

We currently have a Critsit open with Tivoli and IBM hardware support and
this is one of the major issues.

Just trying to help, I guarantee that if you rely only on a q event to let
your customers know if you have all their files backed up you will get
burned.