Andy,
I've managed to dump the logs and have been looking thru the files and have
found some things which confuse me. NT says that 689 log file was last
modified on 5/13 at 8:30pm
(Embedded image moved to file: pic19169.pcx)
yet in the log I have found messages that have an MQMD timestamp that is
later.
200205140150827 GMT is after 5/13/2002/8:30 pm local
any help on why that is, and how can I determine the right log file to
dump, without dumping it?
thanks
glen larson
sample log extract:
LOG RECORD - LSN <0:0:11119:62963>
**********
HLG Header: lrecsize 845, version 1, rmid 0, eyecatcher HLRH
LogRecdType . . : AQM Put Message (257)
Eyecatcher . . : ALRH Version . . . . : 1
LogRecdLen . . : 825 LogRecdOwnr . . : 256 (AQM)
XTranid . . . . : TranType: MQI TranNum{High 0, Low 12984}
QueueName . . . : USZ.xxxxxxxxxxxxxxxxxxxxxxxxxxxx
Qid . . . . . . : {Hash 3572395625, Counter: 10}
ThisLSN . . . . : <0:0:0:0>
PrevLSN . . . . : <0:0:11119:62743>
Version . . . . : 3
SpcIndex . . . : 1
PrevLink.Locn . : 36 PrevLink.Length : 8
PrevDataLink . : {High 0, Low 2048}
Data.Locn . . . : 2048 Data.Length . . : 601
Data . . . . . :
00000: 41 51 52 48 04 00 00 00 FF FF FF FF FF FF FF FF AQRH............
00016: 00 00 00 00 00 00 00 00 01 00 00 00 02 00 C0 01 ..............À.
00032: 00 00 00 00 00 00 01 00 99 00 00 00 00 00 00 00 ........?.......
00048: B7 02 00 00 C3 E2 D8 40 D4 D8 D7 F1 40 40 40 40 ·...ÃâØ@ÔØ×ñ@@@@
00064: 40 40 40 40 B7 A0 73 48 47 6D 58 26 43 49 49 44 @@@@· sHGmX&CIID
00080: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00096: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00112: 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 00 ................
00128: 00 00 00 00 FF FF FF FF 00 00 00 00 00 00 00 00 ................
00144: 00 00 00 00 ED 00 00 00 0B 35 9A D0 FF FF FF FF ....í....5?Ð....
00160: 4D 44 20 20 01 00 00 00 00 00 00 00 01 00 00 00 MD ............
00176: 00 00 00 00 11 03 00 00 F4 01 00 00 4D 51 53 54 ........ô...MQST
00192: 52 20 20 20 00 00 00 00 01 00 00 00 55 53 5A 2E R ........USZ.
00208: -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- xxxxxxxxxxxxxxxx
00224: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20
00240: 20 20 20 20 20 20 20 20 20 20 20 20 XX XX XX XX
XXXX1
00256: XX XX XX 20 20 20 20 20 20 20 20 20 20 20 20 20 XXX
00272: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20
00288: 20 20 20 20 20 20 20 20 20 20 20 20 -- -- -- -- xxxx
00304: -- -- -- 20 20 20 20 20 1A 11 E4 E2 E9 E4 D9 F0 xxx ..äâéäÙð
00320: F0 F0 4B E4 E2 E9 E9 E5 F1 C3 F3 A0 73 48 46 93 ððKäâééåñÃó sHF.
00336: 97 00 01 00 00 00 00 00 20 20 20 20 20 20 20 20 ........
00352: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20
00368: 20 20 20 20 20 20 20 20 01 00 00 00 -- -- -- -- ....xxxx
00384: -- -- -- -- -- -- -- -- 20 20 20 20 20 20 20 20 xxxxxxxx
00400: 20 20 20 20 20 20 20 20 32 30 30 32 30 35 31 34 20020514
00416: 32 30 31 35 30 38 32 37 20 20 20 20 00 00 00 00 20150827 ....
00432: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
Andrew Hickson <[EMAIL PROTECTED]>@AKH-Wien.AC.AT> on 05/14/2002
12:05:45 PM
Please respond to MQSeries List <[EMAIL PROTECTED]>
Sent by: MQSeries List <[EMAIL PROTECTED]>
To: [EMAIL PROTECTED]
cc:
Subject: Re: find lost msg in active log
Glen,
If you're using linear logging, and a persistent message was actually on a
queue at some point in time then it will have been logged. The log is
intended for recovery purposes and doesn't contain any details relating to
the identity of the application that removed the message, but if you're
lucky then some other message may have been put in the same transaction and
might contain some user/application identity.
I'm afraid that the distributed log dumper, dmpmqlog, is not a thing of
beauty, being intended primarily for service use, but it will format the
contents of the recovery log to a more readable form.
Andy.
Glen Larson <[EMAIL PROTECTED]>@AKH-WIEN.AC.AT> on 05/14/2002
05:35:14 PM
Please respond to MQSeries List <[EMAIL PROTECTED]>
Sent by: MQSeries List <[EMAIL PROTECTED]>
To: [EMAIL PROTECTED]
cc:
Subject: find lost msg in active log
Hi,
I know I'm grasping at straws, but.
I'm running MQ5.2 CSD03, on Win NT 4.0 sp6.A
One of my users has lost production messages that were on the MQ server,
(he saw via a browse utility). He would like to find out who removed the
messages, (he's afraid his application has a bug), And if possible recover
the messages. I know that if we were on MVS is would be possible with a
support pack. I have not seen a similar tool for NT in the support
packs. Is there a tool available that could do either (recover the
message, and/or identify the application that got the message)?
thanks
Glen Larson
Zurich NA
******************* PLEASE NOTE *******************
This E-Mail/telefax message and any documents accompanying this
transmission may contain privileged and/or confidential information and is
intended solely for the addressee(s) named above. If you are not the
intended addressee/recipient, you are hereby notified that any use of,
disclosure, copying, distribution, or reliance on the contents of this
E-Mail/telefax information is strictly prohibited and may result in legal
action against you. Please reply to the sender advising of the error in
transmission and immediately delete/destroy the message and any
accompanying documents. Thank you.
Instructions for managing your mailing list subscription are provided in
the Listserv General Users Guide available at http://www.lsoft.com
Archive: http://vm.akh-wien.ac.at/MQSeries.archive
Instructions for managing your mailing list subscription are provided in
the Listserv General Users Guide available at http://www.lsoft.com
Archive: http://vm.akh-wien.ac.at/MQSeries.archive
pic19169.pcx
Description: Binary data
