Re: SMF records type 65?

2006-06-12 Thread Mike Wood
If the tms is RMM, the SMF and journal records created by RMM for the 
uncatalog event that caused updates to rmm data set records should have 
the user ID of the uncataloger. 'Last change userID' field will have this

Mike Wood   RMM Development

On Fri, 9 Jun 2006 12:54:48 -0400, Bruce Black [EMAIL PROTECTED] 
wrote:


 Oh, what tape management software are you running? Could catch it by  
running
 the CA-1 equivalent of TMSAUDIT. (I don't remember the report  numbers 
after
 they forced us to EARL). Or flag it down from your standard tape  
reports
 cycle in the date range we're looking for?
Would a TMS record who uncataloged a tape dataset?

--
Bruce A. Black
Senior Software Developer for FDR
Innovation Data Processing 973-890-7300
personal: [EMAIL PROTECTED]
sales info: [EMAIL PROTECTED]
tech support: [EMAIL PROTECTED]
web: www.innovationdp.fdr.com

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html


SMF records type 65?

2006-06-09 Thread Jasen Kloeppel
We had a tape dataset get uncataloged and hence the tape went scratch and 
the data was lost.  It looks from the SMF manual that type 65 records will 
report this activity.  From the manual : One type 65 record is written for 
each record updated or deleted from a catalog.  Unfortunately we don't 
collect type 65 records here.  I have 2 questions.


Will type 65 records tell me who removed the entry from the catalog?  From 
what I have read I believe so, but I have no records to verify this against.


Is there any other SMF record which I might be able to use to derive the 
same information?


Thanks for any help,

Jasen Kloeppel
[EMAIL PROTECTED]
Shelter Insurance

_
Express yourself instantly with MSN Messenger! Download today - it's FREE! 
http://messenger.msn.click-url.com/go/onm00200471ave/direct/01/


--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html


Re: SMF records type 65?

2006-06-09 Thread Patrick Lyon
On Fri, 9 Jun 2006 07:28:41 -0500, Jasen Kloeppel [EMAIL PROTECTED] 
wrote:


Is there any other SMF record which I might be able to use to derive the
same information?

Thanks for any help,

Jasen Kloeppel
[EMAIL PROTECTED]
Shelter Insurance

Jasen - I am not SMF expert but I have a SAS job written here that I use to 
scan SMF records to see who touched a particular file.

In reading the SAS code, here is what it says for the different types of 
SMF records:

14 - Input
15 - Output
17 - Scratch
18 - Rename
61 - IF ACTCODE = 'IN' THEN ACTIVITY = 'ICF DEFINE (IN)'
 IF ACTCODE = 'DE' THEN ACTIVITY = 'ICF DEFINE (DE)'
 IF ACTCODE = 'UP' THEN ACTIVITY = 'ICF DEFINE (UP)'
 (ACTCODE is at displacement 19)
62 - VSAM Open
64 - VSAM Close
65 - IF ACTCODE = 'S' THEN ACTIVITY = 'VSAM SCRATCH'
 IF ACTCODE = 'U' THEN ACTIVITY = 'VSAM (UN)CAT'
 (This time ACTCODE is at displacement 71
66 - IF ACTCODE = 'R' THEN ACTIVITY = 'RENAME(ICF)'
ELSE ACTIVITY = 'ICF ALTER';
 (ACTCODE is at displacement 71 here too)

Unfortunately I think that 65 is the one you wanted.

HTH,
Patrick Lyon
   

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html


Re: SMF records type 65?

2006-06-09 Thread Mike Bell

I am not an SMF expert either - google brought me to the Cherl Watson smf
ref.pdf
origional poster specified tape dataset and I thought type 17 was scratch
for any non-vsam dataset.
61,62,63,... 66 are all for VSAM.

Mike

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html


Re: SMF records type 65?

2006-06-09 Thread Steve Flynn

On 09/06/06, Jasen Kloeppel [EMAIL PROTECTED] wrote:


Is there any other SMF record which I might be able to use to derive the
same information?


Try Type 17 ( scratch) and 18 (rename).

17 is written when a non-VSAM dataset is scratched. There will be one
type 17 for each volume of a multivolume dataset.

18 is written whenever a non-VSAM dataset is renamed.
--
Steve
Despair - It's always darkest just before it goes pitch black...

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html


Re: SMF records type 65?

2006-06-09 Thread Ed Finnell
 
In a message dated 6/9/2006 8:44:20 A.M. Central Standard Time,  
[EMAIL PROTECTED] writes:

Jasen -  I am not SMF expert but I have a SAS job written here that I use to 
scan  SMF records to see who touched a particular file.

In reading the SAS  code, here is what it says for the different types of 
SMF  records:




Get Micheal Cleary's DAF program off the CBT tape. _www.cbttape.org_ 
(http://www.cbttape.org) 
If it's touched it will find who did it. Alternateively RACF(or equivalent)  
AUDIT report for the file and UCAT should produce similar results. Might give  
Sam**2 a nudge to update the web page too. See you in Seattle??? Hot l Bal  
mor???

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html


Re: SMF records type 65?

2006-06-09 Thread Ed Finnell
 
In a message dated 6/9/2006 9:56:15 A.M. Central Standard Time,  
[EMAIL PROTECTED] writes:

61,62,63,... 66 are all for VSAM.




I think he's looking for the uncatalog from the  UCAT?? 

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html


Re: SMF records type 65?

2006-06-09 Thread Bruce Black

Try Type 17 ( scratch) and 18 (rename).

17 is written when a non-VSAM dataset is scratched. There will be one
type 17 for each volume of a multivolume dataset.

18 is written whenever a non-VSAM dataset is renamed. 
I believe those are for disk datasets only.  The posted was dealing with 
a tape dataset that was uncataloged.


--
Bruce A. Black
Senior Software Developer for FDR
Innovation Data Processing 973-890-7300
personal: [EMAIL PROTECTED]
sales info: [EMAIL PROTECTED]
tech support: [EMAIL PROTECTED]
web: www.innovationdp.fdr.com

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html


Re: SMF records type 65?

2006-06-09 Thread Ed Finnell
 
In a message dated 6/9/2006 11:39:23 A.M. Central Standard Time,  
[EMAIL PROTECTED] writes:

I  believe those are for disk datasets only.  The posted was dealing with  
a tape dataset that was uncataloged.





Oh, what tape management software are you running? Could catch it by  running 
the CA-1 equivalent of TMSAUDIT. (I don't remember the report  numbers after 
they forced us to EARL). Or flag it down from your standard tape  reports 
cycle in the date range we're looking for?

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html


Re: SMF records type 65?

2006-06-09 Thread Bruce Black


Oh, what tape management software are you running? Could catch it by  running 
the CA-1 equivalent of TMSAUDIT. (I don't remember the report  numbers after 
they forced us to EARL). Or flag it down from your standard tape  reports 
cycle in the date range we're looking for?
Would a TMS record who uncataloged a tape dataset?  


--
Bruce A. Black
Senior Software Developer for FDR
Innovation Data Processing 973-890-7300
personal: [EMAIL PROTECTED]
sales info: [EMAIL PROTECTED]
tech support: [EMAIL PROTECTED]
web: www.innovationdp.fdr.com

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html


Re: SMF records type 65?

2006-06-09 Thread Ed Finnell
 
In a message dated 6/9/2006 11:55:13 A.M. Central Standard Time,  
[EMAIL PROTECTED] writes:

Would a  TMS record who uncataloged a tape dataset?   





Don't think so, but should tell us when it went scratch and give us  smaller 
universe of SMF to search?

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html