Re: Deleted directory not in audit journal?

[Steve McKay <samckay1@xxxxxxxxx>]

Thanks, Paul - that is what happened.

When I queried against OM journal entries, it showed up as expected.

Thanks for your help!

Thanks,

Steve McKay
(205) 585-8424
samckay1@xxxxxxxxx



On Mon, May 11, 2020 at 11:15 AM Steinmetz, Paul via MIDRANGE-L <
midrange-l@xxxxxxxxxxxxxxxxxx> wrote:

> I had an issue where an IFS subdirectory was missing.
> What we found, was it wasn't deleted, but accidently moved to a different
> subdirectory.
>
> Paul
>
> -----Original Message-----
> From: MIDRANGE-L <midrange-l-bounces@xxxxxxxxxxxxxxxxxx> On Behalf Of
> Steve McKay
> Sent: Monday, May 11, 2020 10:43 AM
> To: Midrange Systems Technical Discussion <midrange-l@xxxxxxxxxxxxxxxxxx>
> Subject: Deleted directory not in audit journal?
>
> V7R3 - QAUDLVL *DELETE (plus others)
>
> Today we discovered that an IFS directory was missing.  Let's call it
> /A/B/C/X. Directory /A/B/C/X was on the last full system backup from 4/19
> and restored.
>
> I wanted to find out what happened to directory /A/B/C/X and I had all of
> the QAUDJRN receivers since 4/19. I restored them all and there are no
> breaks in journal receiver sequence. I then ran CPYAUDJRNE ENTTYP(DO)
> against all receivers since 4/19, and queried the QAUDITDO file that was
> created.  There were no references to directory /A/B/C/X.  There were
> references to other sub-directories under /A/B/C but not to sub-directory
> X.  I displayed the QAUDITDO file with DSPPFM and used the 'find' function
> to search for /A/B/C/X but did not find it.
>
> I created a test directory /A/B/C/test and deleted it then ran CPYAUDJRNE
> and queried the QAUDITDO file.  I could see where I deleted the /A/B/C/test
> directory.
>
> Any ideas on why /A/B/C/X was not found in the audit receivers?
>
> Thanks,
>
> Steve McKay
> (205) 585-8424
> samckay1@xxxxxxxxx
> --
> This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing
> list To post a message email: MIDRANGE-L@xxxxxxxxxxxxxxxxxx To subscribe,
> unsubscribe, or change list options,
> visit: https://lists.midrange.com/mailman/listinfo/midrange-l
> or email: MIDRANGE-L-request@xxxxxxxxxxxxxxxxxx
> Before posting, please take a moment to review the archives at
> https://archive.midrange.com/midrange-l.
>
> Please contact support@xxxxxxxxxxxxxxxxxxxx for any subscription related
> questions.
>
> Help support midrange.com by shopping at amazon.com with our affiliate
> link: https://amazon.midrange.com
> --
> This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing list
> To post a message email: MIDRANGE-L@xxxxxxxxxxxxxxxxxx
> To subscribe, unsubscribe, or change list options,
> visit: https://lists.midrange.com/mailman/listinfo/midrange-l
> or email: MIDRANGE-L-request@xxxxxxxxxxxxxxxxxx
> Before posting, please take a moment to review the archives
> at https://archive.midrange.com/midrange-l.
>
> Please contact support@xxxxxxxxxxxxxxxxxxxx for any subscription related
> questions.
>
> Help support midrange.com by shopping at amazon.com with our affiliate
> link: https://amazon.midrange.com