The hardest task in searching the system log is that rarely are you interested only in a particular character string. What you normally want is the contextual environment of that string. Even a message id is not very useful if all you get is the one line containing that id. You really need the full, often multiline message that starts with message id but generally contains vital information in subsequent lines.
I don't know of any tool that can do the needful except a special purpose program written for the purpose. We have one here written eons ago in PLI that serves a common purpose. Not sure that we're ready to share it, but I’m dubious of finding a GA tool that satisfy this common requirement. As others have said, if the log in question is on DASD, you can use ISPF browse to find a target string and then look at the surrounding text. May be easy; may be really time consuming. . . J.O.Skip Robinson Southern California Edison Company Electric Dragon Team Paddler SHARE MVS Program Co-Manager 323-715-0595 Mobile 626-543-6132 Office ⇐=== NEW robin...@sce.com -----Original Message----- From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf Of Pew, Curtis G Sent: Friday, February 10, 2017 6:45 AM To: IBM-MAIN@LISTSERV.UA.EDU Subject: (External):Re: SYSLOG/OPERLOG Keyword Search On Feb 10, 2017, at 8:30 AM, Donald J. <dona...@4email.net> wrote: > > What programs (free or IBM or other) are available for doing > historical keyword searches against the SYSLOG or OPERLOG archives? ISPF or > otherwise. I don’t think this is exactly what you’re asking for, but we forward our OPERLOG to Splunk and then we can do all kinds of searches and reports. -- Pew, Curtis G curtis....@austin.utexas.edu ITS Systems/Core/Administrative Services ---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN