I have a client that has all system auditing active.
When I print out the journal data for type *SF (Spool File Action), I see
spool files with type 'C' (created) and 'D' (deleted).
Is there any way to determine the user and job associated with the 'D'
action?
All I seen in the journal display output is the same job and pgm that
created the spool file, not the one that deleted it.

Thanks,


This thread ...

Follow-Ups:

Follow On AppleNews
Return to Archive home page | Return to MIDRANGE.COM home page

This mailing list archive is Copyright 1997-2026 by midrange.com and David Gibbs as a compilation work. Use of the archive is restricted to research of a business or technical nature. Any other uses are prohibited. Full details are available on our policy page. If you have questions about this, please contact [javascript protected email address].

Operating expenses for this site are earned using the Amazon Associate program and Google Adsense.