Rob, I did happen to go to the second level of those messages and below is what I found:
Message ID . . . . . . : CPC1125 Severity . . . . . . . : 50
Date sent . . . . . . : 06/30/16 Time sent . . . . . . : 15:32:33
Message type . . . . . : Completion
From . . . . . . . . . : QSECOFR CCSID . . . . . . . . : 65535
From job . . . . . . . . . . . : QZRCSRVS
User . . . . . . . . . . . . : QUSER
Number . . . . . . . . . . . : 529356
From program . . . . . . . . . : QWTCCCNJ
Time sent . . . . . . . . . . : 15:32:33.662013
The message where I see the netserver being ended is as such:
Message ID . . . . . . : CPIB681
Date sent . . . . . . : 06/30/16 Time sent . . . . . . : 15:32:34
Message . . . . : i5/OS Support for Windows Network Neighborhood (i5/OS
NetServer) QACSD400 ended.
Message ID . . . . . . : CPIB681 Severity . . . . . . . : 00
Date sent . . . . . . : 06/30/16 Time sent . . . . . . : 15:32:34
Message type . . . . . : Information
From . . . . . . . . . : QPGMR CCSID . . . . . . . . : 65535
From job . . . . . . . . . . . : QZLSSERVER
User . . . . . . . . . . . . : QPGMR
Number . . . . . . . . . . . : 168511
From program . . . . . . . . . : QZLSSERVER
Time sent . . . . . . . . . . : 15:32:34.128120
The QPGMR job QZLSSERVER is the program used to end that job, which had to be initiated by another job/user, which all indicate it was QSECOFR.
-----Original Message-----
From: MIDRANGE-L [mailto:midrange-l-bounces@xxxxxxxxxxxx] On Behalf Of Rob Berendt
Sent: Wednesday, July 06, 2016 10:03 AM
To: Midrange Systems Technical Discussion <midrange-l@xxxxxxxxxxxx>
Subject: Re: NetServer
If you hit F1 on one of those messages, and then hit F9 for message details, you will see the actual job which issued the command.
SCNMSGF FILE(QCPFMSG) /* Utility used to find the message id not supplied in the OP */ DSPLOG PERIOD((*AVAIL *BEGIN)) MSGID(CPC1125 CPC1126) Job 038006/MIMIXOWN/MGR_ACCT was ended by user MIMIXOWN.
Job 038031/MIMIXOWN/MGR_ACCT was ended by user MIMIXOWN.
Job 038014/MIMIXOWN/MGR_ACCT@R was ended by user MIMIXOWN.
Job 037712/QYPSJSVR/QYPSJSVR was ended by user MIMIXOWN.
Job 039108/QSPLJOB/EMLPDFPAY was ended by user QSPLJOB.
Job 039115/QSPLJOB/PRTPDF was ended by user QSPLJOB.
Job 039107/QSPLJOB/EMLPDF was ended by user QSPLJOB.
Job 045323/KEVINR/ERPMRP was ended by user DARREN.
Job 045631/KEVINR/ERPMRP was ended by user DARREN.
Job 046554/KEVINR/ERPMRP was ended by user DARREN.
Job 061551/TROYM/PAYROLLGL was ended by user TROYM.
...
f1
F9=Display message details
From job . . . . . . . . . . . : GDL177B1
User . . . . . . . . . . . . : TROYM
Number . . . . . . . . . . . : 067648
This may help us to determine if it was a regular workstation interactive job, or some utility job such as
http://youribmi:2001 and someone using the option to end netserver.
I ended net server yesterday on one lpar.
Job 604290/QPGMR/QZLSSERVER was ended by user QSECOFR.
Job 604332/QUSER/QZLSFILET was ended by user QSECOFR.
Job 604760/QUSER/QZLSFILE was ended by user QSECOFR.
Job 604762/QUSER/QZLSFILE was ended by user QSECOFR.
From job . . . . . . . . . . . : QZRCSRVS
User . . . . . . . . . . . . : QUSER
Number . . . . . . . . . . . : 604411
So, apparently the tool I used runs under QUSER but somehow adopts QSECOFR and ends those jobs. Without changing the signon date for QSECOFR
Previous sign-on . . . . . . . . . . . . . : 07/02/16 19:31:29
Last used date has been updated to today.
Rob Berendt
As an Amazon Associate we earn from qualifying purchases.