Jesse 1 Robinson wrote:

>We have occasional requests from users as to who deleted a particular data 
>set. 

Or renamed? Hmmm? Or (mis)handled by HSM space management? Been there in those 
mess, not a pretty thing of course.


>We have access to SMF data for a reasonable period. SAS however was moved off 
>platform a few years ago to save money on the license. I'm pretty sure DFSORT 
>can provide the answer without bothering someone who has access to the SAS 
>server.

Sri gave you a good answer, a$$uming SMF record 17 can be useful for your quest.


>All we want to know is who deleted a data set on what date. Could someone 
>suggest some control cards that could be used by a user who already has proper 
>access to the SMF data?

You've gotten good replies including usage of DAF and you already downloaded 
that. DAF is an excellent freebie!

For those who can't use DAF due some reasons (management rules and regulations 
or can't download it), there is always SMF RACF records. Of course you need to 
setup auditing and logging properly BEFORE the deletion or renaming of those 
datasets.

Good luck and I hope you can catch the culprit!

Groete / Greetings
Elardus Engelbrecht

----------------------------------------------------------------------
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [email protected] with the message: INFO IBM-MAIN

Reply via email to