Article 142833 of comp.os.vms:
Path: nntpd.lkg.dec.com!crl.dec.com!crl.dec.com!caen!newsxfer2.itd.umich.edu!agate!howland.reston.ans.net!newsfeed.internetmci.com!in1.uu.net!svc.portal.com!portal.com!cup.portal.com!Chris_F_Chiesa
From: Chris_F_Chiesa@cup.portal.com
Newsgroups: comp.os.vms
Subject: Re: user histogram from analy/audit?
Date: 17 Mar 1996 10:00:08 -0800
Organization: The Portal System (TM)
Lines: 55
Sender: pccop@unix.portal.com
Message-ID: <151033@cup.portal.com>
References: <199603142209.QAA19773@oss2>
NNTP-Posting-Host: news1.unix.portal.com

Ike Stoddard, VMS sys adm, u177k@gsde.hso.link.com, writes:

>My boss needs to know about the number of VMS user licenses in use.  A
>plot of information derived from ANALYZE/AUDIT/BRIEF output from
>EVENT=(LOGIN,LOGOUT,LOGFAIL) ought to do it. The SUMMARY=PLOT feature
>doesn't seem to be amenable to showing this.  You can't just subtract
>logouts from logins.  Before I reinvent the wheel,
>  1) Am I looking in the right place viz ANALYZE?
>  2) If I am in the right area, has anyone written or seen a DCL or
>AWK procedure to evaluate the ANALYZE output and produce the "users vs
>time-of-day" chart?  Would any DECUS tape hold my salvation?

Ike, do you have ACCOUNTING enabled on your system?  I don't have anything
that will post-process the output of ANALYZE/AUDIT, but I *do* have an
ACCOUNTING binary-file processor that might serve.  On the off chance
that this may be useful to you, here's an off-the-cuff SPD:

LOGGED_IN_AT 

   Syntax:  LOGGED_IN_AT /INTERVAL=(FROM=datetime, UNTIL=datetime) -
              [accountingfile]  [/DEVICE]

   Lists all processes run on the system during the interval specified 
   by the /INTERVAL qualifier, including those which started before the
   beginning of, ended after the end of, or both started and ended during,
   the specified interval.  LOGGED_IN_AT reads the specified binary
   accounting file (SYS$MANAGER:ACCOUNTNG.DAT if no file is specified
   in the command) *and* examines the running system.  LOGGED_IN_AT dis-
   plays username, login time, logout time and, by default the "number
   of volumes mounted" for each process for which a record exists in 
   the accounting file read, and whose interval of existence in any way 
   overlapped the interval specified in the command.  If the /DEVICE
   qualifier is specified, the process' "login device" (i.e. "controlling
   terminal" for interactive processes) is displayed instead of "number
   of volumes mounted."

   In order for a process to be visible to LOGGED_IN_AT, it must either
   appear in the specified accounting file, or must still be running.
   This means that Accounting must HAVE BEEN enabled on the system at
   the time of process logout, and that the process must have met the 
   then-standing criteria for creation of an Accounting record.  The 
   process must also have met all criteria for inclusion into the binary
   accounting file specified in the command, if that file is not the
   master system Accounting file SYS$MANAGER:ACCOUNTNG.DAT.  This means
   that the user can pre-select the processes to be listed by LOGGED_IN_AT
   by performing an ACCOUNTING/OUTPUT/BINARY operation and then invoking
   LOGGED_IN_AT against the resulting binary extraction file rather than
   the master file itself.

   VAX Macro-32 assembly, source code.  Available from the author of
   this message; inquire within.

--
Chris Chiesa
   Chris_F_Chiesa@cup.portal.com / xetwnk@shell.portal.com