SMF only captures what you tell it to (with SMFPRMxx). Some shops, for example, exclude STC's from certain SMF types "to avoid a performance impact on CICS" or some similar reason. The whole "how to read SMFPRMxx" thing is beyond the scope of an e-mail. D SMF,O will give you a not-quite-trivial-to-parse summary.
SMF 15 shows "opened for output and then closed" (for those subsystems for which it is configured, per the above). Harking back to the IEFBR14 discussion here a week or so ago, I wonder if a basic "create a DSN with IEFBR14 DISP=(NEW,CTALG)" shows up in SMF 15 (because it does not close the dataset). Others may well know. Charles -----Original Message----- From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf Of willie bunter Sent: Saturday, August 24, 2019 10:30 AM To: IBM-MAIN@LISTSERV.UA.EDU Subject: SMF PUZZLE Good Day, I am trying to find the user/job which created a dsn. I run my trustworthy SMF job which looks for recids 05 14 15 17 18 61 62 63 64 65 66 67 68 136 139 163. The job showed the job which read the dsn & deleted it but it doesn't show who or which job created it.According to the LISTCAT the creation date of the dsn was Thursday Aug. 22. I read the SMF tape for the previous week and subsequent days including Aug 22 & 23. I was thinking if the dsn was created by a FTP or an UNIX upload process which may not be trapped by SMF Any thoughts? Any suggestions ---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
