How to check when the object or library got deleted from the system.

15 pts.
Tags:
AS/400
AS/400 backup
AS/400 Library
AS/400 objects
When we took the backup found the library was not exist in the system, i want to checkwhen the library got deleted from the system. Thanks in advance.

Answer Wiki

Thanks. We'll let you know when a new response is added.

Use DSPJRN to list journal code ‘T’ and entry type ‘DO’ for the time period that the library was deleted. Review the entries to find the entry for that library. (The DSPAUDJRNE command might be easier for you, but it only outputs to the screen or to a spooled file.)

If you are not auditing for deleted objects or if you cannot obtain the QAUDJRN journal receivers for the necessary time frame, then it will only be sheer luck if you can find what happened. For example, you might look through every joblog on the system and find one that shows the deletion of the library; but that’s pretty unlikely.

Tom

Discuss This Question: 3  Replies

 
There was an error processing your information. Please try again later.
Thanks. We'll let you know when a new response is added.
Send me notifications when members answer or reply to this question.

REGISTER or login:

Forgot Password?
By submitting you agree to receive email from TechTarget and its partners. If you reside outside of the United States, you consent to having your personal data transferred to and processed in the United States. Privacy
  • MelanieYarbrough
    Hi Booma, Please include additional details such as what systems you're using and what versions so the community can provide a better answer. Thanks! Melanie
    6,345 pointsBadges:
    report
  • Booma
    Hi, Thanks for the quick response!! I'm using iseries as400 server with the version of V5R4M0, after taking the backup i could see "Library CO67SAVF not found". I want to know who deleted this library and when it happened?
    15 pointsBadges:
    report
  • TomLiotta
    I assumed that it was AS/400-related because of word "library". The system audit journal (QAUDJRN) is the only likely place where the deletion notice would be logged. The two potential problems are that the system was never configured to log deleted objects or that the system is logging deleted objects but the volume is very large. Displaying the QAUDJRN journal for journal code 'T' and entry type 'DO' to an outfile might be the best choice just because of the number of possible entries. The outfile can be queried to find entries. Tom
    125,585 pointsBadges:
    report

Forgot Password

No problem! Submit your e-mail address below. We'll send you an e-mail containing your password.

Your password has been sent to:

To follow this tag...

There was an error processing your information. Please try again later.

REGISTER or login:

Forgot Password?
By submitting you agree to receive email from TechTarget and its partners. If you reside outside of the United States, you consent to having your personal data transferred to and processed in the United States. Privacy

Thanks! We'll email you when relevant content is added and updated.

Following