Audit trial in SAS

[deleted_user]

Dear All,
Kindly inform to me.
Actually we are using SAS 9.1.3 in Windows Xp with Service pack1.
Now I want to capture the details of sessions(open/end/create a file/edit a file/delete a file) that means Audit trial.
How to access it?
I want full details regarding this.

[RolandRB]

> Dear All,
> Kindly inform to me.
> Actually we are using SAS 9.1.3 in Windows Xp with
> Service pack1.
> Now I want to capture the details of
> sessions(open/end/create a file/edit a file/delete a
> file) that means Audit trial.
> How to access it?
> I want full details regarding this.

You mention "file". Do you really mean "dataset"? Anyhow, search the online documentation for the word "audit".

http://support.sas.com/onlinedoc/913/docMainpage.jsp

[deleted_user]

Ok you are giving for dataset. But I want capture details of entire SAS (opem/close/create a file /edit a file /delete a file) only. I want answer as early as possible.

[RolandRB]

> Ok you are giving for dataset. But I want capture
> details of entire SAS (opem/close/create a file /edit
> a file /delete a file) only. I want answer as early
> as possible.

I think you will have to get information on files from one of the system logs. Can someone correct me if I am wrong.

[deleted_user]

I'm sure you do, but my clients also want answers as early as possible and they are paying for my time. Free advice has to come when free time allows.

The Windows registry keeps a record of files opened in an application through the MRU list. Reading the registry and exporting the data is the subject of a number of operating system tools and applications you can find by searching on Google. Some presumably give great results and response times if their price is any guide.

The limitations are many and include the length of the MRU list as defined in the application. Accessing 25 programs during the day and exporting the results at end of day will still only list four programs if that is all you set in the session options.

Knowing whether the file was saved is equally circuitous, and requires checking the Access / Modified / Written dates for the file from the file attributes.

I remember there were undocumented options for V6 that allowed you to trap more activity in your SAS session, but I don't recall what these were and wouldn't know if they are still available.

Kind regards

David

P.S. forum support: the word "SAS" is coming up as incorrect in the spell check application.