Thanks
----- Original Message -
Thanks David and all who replied.
Thanks
----- Original Message ----
From: David Betten <[EMAIL PROTECTED]>
To: IBM-MAIN@BAMA.UA.EDU
Sent: Thursday, 13 December, 2007 11:15:18 PM
Subject: Re: Extracting SMF Records to find the userid who deleted a dataset
You can try this
//SORT EXEC PGM=SORT,REGION=5000K
//SYSPRINT DD SYSOUT=*
//SYSOUT DD SYSOUT=*
//SORTIN DD DISP=SHR,DSN=inputsmf
//SORTOUT DD DISP=(NEW,PASS),DSN=&&TEMP,
// SPACE=(CYL,(50,20),RLSE),DCB=*.SORTIN,UNIT=SYSLG
//SYSIN DD *
SORT FIELDS=COPY
INCLUDE COND=(6,1,BI,EQ,X'11',&,
45,44,CH,EQ,
C'deleted.dsn ')
OPTION VLSHRT
/*
//PRINT EXEC PGM=IDCAMS
//IN1 DD DISP=(OLD,PASS),DSN=&&TEMP
//SYSPRINT DD SYSOUT=*
//SYSIN DD *
PRINT INFILE(IN1) DUMP
/*
Type 17 is pretty easy becaue the dsn is part of the header so you know the
offset in each record. Some other smf record types are not so simple
because you need to use the triplet for the offset to the section that had
the data. Also, I used a length of 44 for the dsn field. If your dsn is
less tan 44, you can shorten the length and get rid of the trailing blanks.
Have a nice day,
Dave Betten
DFSORT Development, Performance Lead
IBM Corporation
email: [EMAIL PROTECTED]
DFSORT/MVSontheweb at http://www.ibm.com/storage/dfsort/
IBM Mainframe Discussion List <IBM-MAIN@BAMA.UA.EDU> wrote on 12/13/2007
11:51:04 AM:
> On one of our account, a production dataset is deleted. We
> Greetings,
>
> On one of our account, a production dataset is deleted. We have to
> find the userid of the person who deleted that specific dataset. I
> know that we can extract the SMF records with IFASMFDP and Sort the
> record type 17 for it. However, I am not sure what would be the sort
> JCL and sort control statements for it.
>
> Could you please guide me or provide a sample jcl which could
> extract the SMF dataset and find the userid.
>
> Any help is greatly appreciated.
>
> Thanks
> Vijay
>
>
> 5, 50, 500, 5000 - Store N number of mails in your inbox. Go to
> http://help.yahoo.com/l/in/yahoo/mail/yahoomail/tools/tools-08.html
>
> ----------------------------------------------------------------------
> For IBM-MAIN subscribe / signoff / archive access instructions,
> send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO
> Search the archives at http://bama.ua.edu/archives/ibm-main.html
----------------------------------------------------------------------
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html
Get the freedom to save as many mails as you wish. To know how, go to
http://help.yahoo..com/l/in/yahoo/mail/yahoomail/tools/tools-08.html
----------------------------------------------------------------------
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html
