In the Data Vault SQL Worksheet or a third-party SQL tool, run the following command:

EXTRACT FROM AUDIT <"predefined attribute">, <column name>, INTO '<file path>';

Replace <predefined attribute> with the type of audit information that you want to extract from the audit log.

The following table describes valid inputs for the

EXTRACT FROM AUDIT

command:

Attribute	Description
CURRENT TIMESTAMP	Time when the SQL request statement was received by the Data Vault.
CURRENT USER	User name on the client connection that issued the SQL request statement to the Data Vault.
CURRENT SERVER	The host and port that the client server is running on.
CURRENT SQL	The SQL request statement issued to the Data Vault.
CURRENT SQLID	A string that contains a unique query identifier that is issued by the Data Vault server.
ROW TIMESTAMP	The time when a specific row is sent to the client.

Replace <column name> with the names of the audited columns that you want to extract from the audit log and write to the CSV file. These columns are the columns that you configured to trigger the audit when you created the rule to rewrite SQL requests.

Replace <file path> with the name of the directory where you want to create the CSV file in addition to the file name. For example,

C:\ILM-IDV\fas_logs\Audit1.log

For example, the following query extracts information from the columns LASTNAME, FIRSTNAME, and SOCIAL, in addition to the time stamp and client user name:

EXTRACT FROM AUDIT "CURRENT TIMESTAMP", "CURRENT USER", LASTNAME, FIRSTNAME, SOCIAL INTO 'C:\ILM-IDV\fas_logs\Audit1.log';

When you run the

EXTRACT FROM AUDIT

command, the command extracts the information that you specify in the SQL statement and writes it to a formatted CSV file. The file is located in the directory that you specify in the command.