How to identify the edit user for the VSAM file in prod?

Rajesh S · New User Joined: 11 Jul 2007 Posts: 54 Location: Chennai

Hi VSAM Gaints!

I have to identify the user who edit the production VSAM file dataset.

(Or)

Need information whether the production VSAM file dataset is edited or not? If edited, on which date and time?

Thanks!
Rajesh S.

enrico-sorichetti · Posted: Wed Dec 15, 2010 8:51 pm

please explain better....
production datasets are never edited , they are UPDATED according to the application specifications

generally EDITING is considered a non procedural task, with no auditing, no validation, no ..., no ..., no ...,NO to all the things that preserve the integrity and consistency of the data!

if on the other side You use edit as a substitute for update, well that' part of the application specification
and if this possibility has not been accounted for into the initial requirement
it will not easy to add it later on

Anuj Dhawan · Posted: Wed Dec 15, 2010 9:08 pm

SMF records?

Type 60 records updates to the VSAM volume Dataset (VVDS). Updates are recorded as INSERTED, DELETED or UPDATED. As SMS puts NVR entries into the VVDS for non-VSAM files, this can give you comprehensive audit activity for who has been creating, deleting and updating files. Some of the information this record provides is date, time, jobname, action, filename, volume(s), catalog, sms classes and newname if appropriate.

Type 61/65/66 -- These all involve IDCAMS VSAM processing. Type 61 is a DEFINE, Type 65 is a DELETE and Type 66 is an ALTER.

Type62/64 -- These records relate to VSAM component or cluster processing. Type 62 is for a cluster open, and type 64 for a cluster close or volume switch. The records include the catalog and volumes that relate to the cluster, the date and time the cluster was opened, and the job name. The type 64 record also contains information about SMB, NSR and LSR usage.

dbzTHEdinosauer · Posted: Wed Dec 15, 2010 9:21 pm

Anuj,

will smf records be generated when someone 'edits' a vsam dataset with File-Aid?

dick scherrer · Posted: Wed Dec 15, 2010 9:32 pm

Hello,

Rajesh S · New User Joined: 11 Jul 2007 Posts: 54 Location: Chennai

There is no permits to edit or update the production other than production support team. Before edit or update the dataset they have to get proper approval.

but I could not track those information.

Before edit or update the production file. They will take a backup file.

In my case backup file also missing..

dick scherrer · Posted: Thu Dec 16, 2010 12:22 am

Hello,

How long ago was the edit of interest done?

If it was not recently, it is quite possible that all of the "footprints" are gone. . .

Other than assigning blame, what would be the use of finding "who". What has been described is a very dangerous way of processing and that needs to be addressed rather than worry about "who" made some particular undocumented change to the data.

If proper approval was gotten before the change was made, there should still a record of "who" did "what".

Robert Sample · Posted: Thu Dec 16, 2010 1:13 am

dbz: I verified that using File Aid to edit a KSDS VSAM file does generate SMF records for the updates. I saw the usual type 60, 62, 64 records so I assume the others would be generated if I did deletes in the file as well.

PeterHolland · Posted: Thu Dec 16, 2010 12:26 pm

I would eventually go for a RACF audit trail.

dbzTHEdinosauer · Posted: Thu Dec 16, 2010 2:14 pm

thx Robert.