On Thu, 27 Aug 2015 07:16:34 -0700, Charles Mills <[email protected]> wrote:
>No, not irrelevant at all. The original question was "to determine when a >certain program was executed." The problem is that there is no >record in SMF of every program executed. Jobstep program names are recorded in >SMF. You can get such auditing from RACF for non-LPA-resident programs defined in the PROGRAM class. That's still not "every" program, of course, but it would let you audit everything in the linklist or APF list, for example, or selected other libraries. That may suffice for what the OP needs, or it's at least better than what SMF type 30 will provide. On the other hand, that will be a substantial amount of auditing, and probably more than anyone would want to see in general. And it's of no use if he needs to investigate something that happened in the past, before the auditing was enabled. -- Walt ---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [email protected] with the message: INFO IBM-MAIN
