Sunil, ACF2 cuts SMF records
Scott ford www.identityforge.com Tell me and I'll forget; show me and I may remember; involve me and I'll understand. - Chinese Proverb On Jan 23, 2013, at 10:58 AM, sunil mirchandani <[email protected]> wrote: > Hello John, > > We are using ACF2 in our shop. > > Thanks > > On Wed, Jan 23, 2013 at 9:24 PM, John McKown > <[email protected]>wrote: > >> I've never looked, but if you have RACF auditing set up, then you >> _might_ find a RACF audit record in SMF. >> >> IRRADU00 output Ref: >> >> for "rmdir" >> http://publibz.boulder.ibm.com/cgi-bin/bookmgr_OS390/BOOKS/ichza3c0/6.5.48 >> >> for "rm" (aka "unlink") >> http://publibz.boulder.ibm.com/cgi-bin/bookmgr_OS390/BOOKS/ichza3c0/6.5.54 >> >> There are some sample things in SYS1.SAMPLIB(IRRADU--) members, but >> they are DB2 oriented. >> >> >> On Wed, Jan 23, 2013 at 9:38 AM, sunil mirchandani >> <[email protected]> wrote: >>> Hello Team, >>> >>> Can any one help to find out who has deleted particular files/directories >>> under OMVS. >>> >>> Do we have any command to check or any other way( Any utility/job which >>> takes SMF data as a input and generate some report to find the user who >> has >>> deleted). >>> >>> Any help much appreciated. >>> >>> Thanks & Regards: >>> Sunil Mirchandani >>> 9742433311 >>> >>> "Yesterday I dared to struggle. Today I dare to win" >>> >>> ---------------------------------------------------------------------- >>> For IBM-MAIN subscribe / signoff / archive access instructions, >>> send email to [email protected] with the message: INFO IBM-MAIN >> >> >> >> -- >> Maranatha! <>< >> John McKown >> >> ---------------------------------------------------------------------- >> For IBM-MAIN subscribe / signoff / archive access instructions, >> send email to [email protected] with the message: INFO IBM-MAIN > > > > -- > Thanks & Regards: > Sunil Mirchandani > 9243116830 > > "Yesterday I dared to struggle. Today I dare to win" > > ---------------------------------------------------------------------- > For IBM-MAIN subscribe / signoff / archive access instructions, > send email to [email protected] with the message: INFO IBM-MAIN ---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [email protected] with the message: INFO IBM-MAIN
