gsg wrote:

>Is there a way to determine how a specific dataset was deleted from the 
>system?  

Many ways as long you have enabled the recording/storing of SMF records BEFORE 
that event!

As others said:

DAF or any other such tools.

SMF 17    - Non-VSAM
SMF 60:69 - VSAM

RACF SMF 83 - as long you have AUDIT(ALL(READ)) set for the covering profile 
and DATASET is in LOGOPTIONS ALWAYS.

Then you get SMF 18 if your dataset was RENAMED instead of deleted.

You could check if the Catalog entry was deleted while the Non-SMS dataset was 
still there.

Oh, you'll have to check ALL LPARs SMF records.

Groete / Greetings
Elardus Engelbrecht

----------------------------------------------------------------------
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [email protected] with the message: INFO IBM-MAIN

Reply via email to