IBM Mainframe Forum Index
 
Log In
 
IBM Mainframe Forum Index Mainframe: Search IBM Mainframe Forum: FAQ Register
 

To find who deleted data set


IBM Mainframe Forums -> All Other Mainframe Topics
Post new topic   Reply to topic
View previous topic :: View next topic  
Author Message
cappucino

New User


Joined: 26 Nov 2007
Posts: 5
Location: chennai

PostPosted: Fri Feb 12, 2010 10:37 am
Reply with quote

Hi, Can any body no how to find the user who deleted a data set. I was testing some of my jobs. Don't know how some of the files got deleted.. So is it possible to find out how it got deleted... Thanks in advance.
Back to top
View user's profile Send private message
MBabu

Active User


Joined: 03 Aug 2008
Posts: 400
Location: Mumbai

PostPosted: Fri Feb 12, 2010 11:22 am
Reply with quote

Only via SMF records. Search here or the web for previous discussions. Not sure how much info is in those particular records. Others may have more detail or you can look up the SMF record types.
Back to top
View user's profile Send private message
dick scherrer

Moderator Emeritus


Joined: 23 Nov 2006
Posts: 19244
Location: Inside the Matrix

PostPosted: Fri Feb 12, 2010 11:54 am
Reply with quote

Hello,

Quote:
I was testing some of my jobs. Don't know how some of the files got deleted..
Suggest the first place to look is these test jobs. . .

If there are weekly full-volume backups and the datasets existed when a backup was taken, the storage management people may be able to rescue them. . .

When did you last use these datasets? This would set a limit on how far back you would need to look in the SMF data.
Back to top
View user's profile Send private message
expat

Global Moderator


Joined: 14 Mar 2007
Posts: 8797
Location: Welsh Wales

PostPosted: Fri Feb 12, 2010 12:27 pm
Reply with quote

Also ask storage management about backups that may exist from daily incrementals. Some shops protect the development environments quite fiercly as development is often seen as the high cost stage of a product or application.
Back to top
View user's profile Send private message
cappucino

New User


Joined: 26 Nov 2007
Posts: 5
Location: chennai

PostPosted: Sat Feb 13, 2010 9:43 am
Reply with quote

Hi, the files were present a day before and the next day it was not thee. Still many people are testing i am not sure whether any of them deleted it.. If that is the case, the issue should be handled accordingly.. So is it possible to know which user id deleted the file??? The back-ups are not taken and so HRECOVER is not working....

The only way is to test again. But this should not happen every time. So will be very much grateful if any one let me know who deleted that particular data set
Back to top
View user's profile Send private message
dick scherrer

Moderator Emeritus


Joined: 23 Nov 2006
Posts: 19244
Location: Inside the Matrix

PostPosted: Sat Feb 13, 2010 9:51 am
Reply with quote

Hello,

As MBabu mentioned in the first reply - you would have to look at the SMF records for that time period.

If you intend to pursue this, you will probably need to work with your storage management people. They are most likely to know if there is already something available to identify what happened to some dataset(s). If there is not something available and your management wants to learn what happened, the storage management people are the best qualified to help.
Back to top
View user's profile Send private message
View previous topic :: :: View next topic  
Post new topic   Reply to topic View Bookmarks
All times are GMT + 6 Hours
Forum Index -> All Other Mainframe Topics

 


Similar Topics
Topic Forum Replies
No new posts How to save SYSLOG as text data via P... All Other Mainframe Topics 4
No new posts Store the data for fixed length COBOL Programming 1
No new posts Data set Rec-Cnt and Byte-Cnt Testing & Performance 2
No new posts To find whether record count are true... DFSORT/ICETOOL 6
No new posts SCOPE PENDING option -check data DB2 2
Search our Forums:

Back to Top