Video Screencast Help
Symantec to Separate Into Two Focused, Industry-Leading Technology Companies. Learn more.

SQL query to determine access to archived items?

Created: 07 Feb 2013 • Updated: 10 Feb 2013 | 10 comments
Sarah.Seftel's picture
This issue has been solved. See solution.

Hi,

assuming I don't want to enable auditing or install reporting services.

Is there a query I can run against vault store DB to determine user access rate to archived items in the past week by hours?

I have a scheduled evening upgrade, and the customer is concerned that we will cause many users to not be able to work correctly. (no vault cache)
I'm trying to think of a simple query that I can run against the vault store DB that will give me in results how many users accessed archived items between 18PM to 00PM, so I can show him "you see? only 9 people out of 25,000 tried to open archived item"...smiley

any ideas?

Is it even possible?

Sarah

Comments 10 CommentsJump to latest comment

GertjanA's picture

You might want to check IIS logfiles, but as Rob states, it is not possible in SQL

Thank you, Gertjan, MCSE, MCITP,MCTS, SCS, STS
Company: www.t2.nl

www.quadrotech-it.com

www.symantec.com/vision

Rob.Wilcox's picture

And whilst you're marking one of the posts here as a solution :)  You might want to take a look at this article I wrote about logparser:

http://thingsilearnedtoday.net/2011/05/09/using-log-parser-with-enterprise-vault/

EV's picture

After reviewing your link I think that this is the only viable, no cost, way to achieve that goal without enabling auditing with item access granularity enabled.

Rob.Wilcox's picture

Glad to help.

BTW .. Auditing isn't necessarily the answer.  Last time I checked all of the 'http' access to items is recorded as the Vault Admin Account, rather than the 'actual' user which performed the retrieval.

JesusWept3's picture

but the idea is to show how many items are being accessed at all right? so regardless of the user, it will validate what is needed

Rob.Wilcox's picture

guess so.. but would need to turn on auditing, let it run etc.. whereas IIS logs are likely to already have this information.

John Santana's picture

wow, I thought that therei s solution about this, but yes it will be to hard to perform I guess...

Kind regards,

John Santana
IT Professional

--------------------------------------------------

Please be nice to me as I'm newbie in this forum.