Peter, (Resending with a proper Subject) If this is a RACF protected system and depending on what audit settings were in effect, you might see an SMF 80 record for the unmount. The event code is 55. If you have SMF unload records available, look for event UMNTFSYS.
Regards, Bob Robert S. Hansel Lead RACF Specialist RSH Consulting, Inc. *** Celebrating our 25th Year *** 617-969-8211 www.linkedin.com/in/roberthansel http://twitter.com/RSH_RACF www.rshconsulting.com -----Original Message----- Date: Tue, 19 Dec 2017 18:10:10 -0600 From: Peter Ten Eyck <peter.tene...@americannational.com> Subject: How to find what performed an OMVS unmount? I have an OMVS dataset that was mounted via a batch job on a z/OS 2.2 LPAR: //SYSTSPRT DD SYSOUT=* //SYSTSIN DD * PROF MSGID WTPMSG MOUNT FILESYSTEM('CICSTS53.CICS.ESA1.HFS.FF') + MODE(RDWR) TYPE(ZFS) NOAUTOMOVE + MOUNTPOINT('/usr/lpp/cicsts53') This job was run after the CICS region was already up and is used for CICS TS 5.3 web services. The web services were dynamically installed from this successfully mounted dataset and worked fine. Sometime over night the dataset (file) became un-mounted. How can I determine what un-mounted the file? I do not see anything in the syslog or the CICS log. Can I use SMF to determine this, what record type would be used? ---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
