For a non-VSAM dataset delete SMF 17 will give you the date and time of the delete and the job name. From there you can work backwards to the userid.
Charles -----Original Message----- From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf Of Jasi Grewal Sent: Thursday, December 31, 2020 6:32 PM To: IBM-MAIN@LISTSERV.UA.EDU Subject: SMF Type65 - Determine who Deleted the Dataset Hi, I have a situation where a user is requesting information in how his datasets got deleted. We tried using SMF and then using RACFRW to generate report but is not reporting on Dataset delete but it has all other information. Is there a Tool available where one can use to read SMF type 65 and generate reports on dataset deletes. Any information would be appreciated. Thank you in advance, Regards, Jasi Grewal. ---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN ---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN