EXAMPLE 1:
The following command will find files created in January 2017 and move them to the new location (/archive/201701/):
# find /var/opt/quest/qpm4u/iolog –name \*201701\*” | xargs -i{} mv {} /archive/201701
Note that the use of xargs may vary depending on the operating system.
# find /var/opt/quest/qpm4u/iolog –type f -mtime +30 | xargs -i{} mv {} /archive
If you need to determine the corresponding eventlog entry from the iolog then do the following:
- Run the pmreplay command:
# /opt/quest/sbin/pmreplay
- Press v
- Take a note of the 'uniqueid' variable shown
- Run the following pmlog command to show the event entry for this uniqueid:
# /opt/quest/sbin/pmlog --uniqueid
Note that if you have moved the event log then you need to use the '-f ' option with pmlog
Please also read "Backing up and archiving event and keystroke logs" of the Administrators Guide.
© 2024 One Identity LLC. ALL RIGHTS RESERVED. Terms of Use Privacy Cookie Preference Center