Re: Any SMF Cut for MVS Commands "cancel"
Thanks processed with mxg/sas smf type80 doesn't contain information unfortunately.. -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: INFO IBM-MAIN
Re: Any SMF Cut for MVS Commands "cancel"
If the NETVIEW doesn't logs this, I don't know how to find . It was issued from NETVIEW You will not find via SMF. On 24.04.2012 10:47, Ravi Gaur wrote: job got S222 from type30 however that doesn't give answer to me who did it.. Nothing in netlog.. -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: INFO IBM-MAIN -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: INFO IBM-MAIN
Re: Any SMF Cut for MVS Commands "cancel"
Ravi Gaur wrote: >We have had a situation where somebody cancelled a job which caused IMS left >in middle and later issue now we tried finding who issued it however it got >just INTERNAL (Generally something coming from console) anybody know any other >pin to go back to root who issued it..another thing I could notice is command >seems to be coming thru netview.. >12114 14:46:37.86 INTERNAL 0290 CANCEL STLD3VDC,A=025B >12114 14:46:37.90 STC12398 0290 CANCEL STLD3VDC,A=025B > >STC12398 = Netview task.. >Now SMF30 doesn't contain any info neither 26 ..Syslog doesn't got anything >Netview log got only command as pasted here...any call? If you have RACF and you have SMF records type 80, etc for RACF records, you may perhaps have some clues. But then you should have LOGOPTIONS(ALWAYS) setup for the RACF class OPERCMDS before that event... I don't know if you will get other info from SMF RACF records besides 'internal', 'master' or something like that. HTH and good luck! Groete / Greetings Elardus Engelbrecht -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: INFO IBM-MAIN
Re: Any SMF Cut for MVS Commands "cancel"
job got S222 from type30 however that doesn't give answer to me who did it.. Nothing in netlog.. -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: INFO IBM-MAIN
Re: Any SMF Cut for MVS Commands "cancel"
Type 30 should have the appropriate abend code - for the cancelled job. Cheers, Martin Martin Packer, Mainframe Performance Consultant, zChampion Worldwide Banking Center of Excellence, IBM +44-7802-245-584 email: martin_pac...@uk.ibm.com Twitter / Facebook IDs: MartinPacker Blog: https://www.ibm.com/developerworks/mydeveloperworks/blogs/MartinPacker From: Ravi Gaur To: IBM-MAIN@bama.ua.edu, Date: 24/04/2012 07:46 Subject: Any SMF Cut for MVS Commands "cancel" Sent by: IBM Mainframe Discussion List We have had a situation where somebody cancelled a job which caused IMS left in middle and later issue now we tried finding who issued it however it got just INTERNAL (Generally something coming from console) anybody know any other pin to go back to root who issued it..another thing I could notice is command seems to be coming thru netview.. 12114 14:46:37.86 INTERNAL 0290 CANCEL STLD3VDC,A=025B 12114 14:46:37.90 STC12398 0290 CANCEL STLD3VDC,A=025B > STC12398 = Netview task.. Now SMF30 doesn't contain any info neither 26 ..Syslog doesn't got anything Netview log got only command as pasted here...any call? -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: INFO IBM-MAIN Unless stated otherwise above: IBM United Kingdom Limited - Registered in England and Wales with number 741598. Registered office: PO Box 41, North Harbour, Portsmouth, Hampshire PO6 3AU -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: INFO IBM-MAIN
Re: Any SMF Cut for MVS Commands "cancel"
any clue in netlog? On Tue, Apr 24, 2012 at 2:45 PM, Ravi Gaur wrote: > We have had a situation where somebody cancelled a job which caused IMS > left in middle and later issue now we tried finding who issued it however > it got just INTERNAL (Generally something coming from console) anybody know > any other pin to go back to root who issued it..another thing I could > notice is command seems to be coming thru netview.. > > 12114 14:46:37.86 INTERNAL 0290 CANCEL STLD3VDC,A=025B > 12114 14:46:37.90 STC12398 0290 CANCEL STLD3VDC,A=025B > > STC12398 = Netview task.. > > Now SMF30 doesn't contain any info neither 26 ..Syslog doesn't got > anything Netview log got only command as pasted here...any call? > > -- > For IBM-MAIN subscribe / signoff / archive access instructions, > send email to lists...@bama.ua.edu with the message: INFO IBM-MAIN > -- Cobe Xu Best Regards --- z/OS Performance & Capacity Analyst z/OS System Programmer Email: cob...@gmail.com --- -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: INFO IBM-MAIN
Any SMF Cut for MVS Commands "cancel"
We have had a situation where somebody cancelled a job which caused IMS left in middle and later issue now we tried finding who issued it however it got just INTERNAL (Generally something coming from console) anybody know any other pin to go back to root who issued it..another thing I could notice is command seems to be coming thru netview.. 12114 14:46:37.86 INTERNAL 0290 CANCEL STLD3VDC,A=025B 12114 14:46:37.90 STC12398 0290 CANCEL STLD3VDC,A=025B > STC12398 = Netview task.. Now SMF30 doesn't contain any info neither 26 ..Syslog doesn't got anything Netview log got only command as pasted here...any call? -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: INFO IBM-MAIN
