Hi,

Just found the below note :

"IBM suggests three alternate methods: the Service Level Reporter (SLR),
the SMF unload utility (IRRADU00), or DF/SORT or a comparable reporting
utility reading the unformatted SMF records. Each of these has advantages
depending on available products at your installation. UNIX has its own
collection of reporting services "

Jake

On Wed, Jan 23, 2013 at 9:24 PM, John McKown
<[email protected]>wrote:

> I've never looked, but if you have RACF auditing set up, then you
> _might_ find a RACF audit record in SMF.
>
> IRRADU00 output Ref:
>
> for "rmdir"
> http://publibz.boulder.ibm.com/cgi-bin/bookmgr_OS390/BOOKS/ichza3c0/6.5.48
>
> for "rm" (aka "unlink")
> http://publibz.boulder.ibm.com/cgi-bin/bookmgr_OS390/BOOKS/ichza3c0/6.5.54
>
> There are some sample things in SYS1.SAMPLIB(IRRADU--) members, but
> they are DB2 oriented.
>
>
> On Wed, Jan 23, 2013 at 9:38 AM, sunil mirchandani
> <[email protected]> wrote:
> > Hello Team,
> >
> > Can any one help to find out who has deleted particular files/directories
> > under OMVS.
> >
> > Do we have any command to check or any other way( Any utility/job which
> > takes SMF data as a input and generate some report to find the user who
> has
> > deleted).
> >
> > Any help much appreciated.
> >
> > Thanks & Regards:
> > Sunil Mirchandani
> > 9742433311
> >
> > "Yesterday I dared to struggle. Today I dare to win"
> >
> > ----------------------------------------------------------------------
> > For IBM-MAIN subscribe / signoff / archive access instructions,
> > send email to [email protected] with the message: INFO IBM-MAIN
>
>
>
> --
> Maranatha! <><
> John McKown
>
> ----------------------------------------------------------------------
> For IBM-MAIN subscribe / signoff / archive access instructions,
> send email to [email protected] with the message: INFO IBM-MAIN
>

----------------------------------------------------------------------
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [email protected] with the message: INFO IBM-MAIN

Reply via email to