I've never looked, but if you have RACF auditing set up, then you _might_ find a RACF audit record in SMF.
IRRADU00 output Ref: for "rmdir" http://publibz.boulder.ibm.com/cgi-bin/bookmgr_OS390/BOOKS/ichza3c0/6.5.48 for "rm" (aka "unlink") http://publibz.boulder.ibm.com/cgi-bin/bookmgr_OS390/BOOKS/ichza3c0/6.5.54 There are some sample things in SYS1.SAMPLIB(IRRADU--) members, but they are DB2 oriented. On Wed, Jan 23, 2013 at 9:38 AM, sunil mirchandani <[email protected]> wrote: > Hello Team, > > Can any one help to find out who has deleted particular files/directories > under OMVS. > > Do we have any command to check or any other way( Any utility/job which > takes SMF data as a input and generate some report to find the user who has > deleted). > > Any help much appreciated. > > Thanks & Regards: > Sunil Mirchandani > 9742433311 > > "Yesterday I dared to struggle. Today I dare to win" > > ---------------------------------------------------------------------- > For IBM-MAIN subscribe / signoff / archive access instructions, > send email to [email protected] with the message: INFO IBM-MAIN -- Maranatha! <>< John McKown ---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [email protected] with the message: INFO IBM-MAIN
