File Information › File History Search

Previous Topic: File Comparison

Next Topic: File Freezer

File History Search

The File History Search display (6.5) detects access, update, and other operations performed on z/OS system or production application data files. The search is based on records that the system management facility (SMF) collected.

You must have read access to SMF files to use this function. If log streams are active, IXG2CON needs read authority to the log streams. See the Usage Guide for additional information.

Auditor___________________________ Location___________________ Page____of____

Approved__________________________ CPU________________________ Date__________

Step

Description

W/P Ref

Finding

Remarks

1

Obtain the names of z/OS system files using the Key z/OS Libraries display (2.4).

To look at data sets comprising the logical Parmlib, use the Parmlib Show Datasets function (2.1.3) to obtain this list.

 

 

 

2

Scan SMF files or log streams to detect accesses to and updates of these files and libraries using the File History Search display (6.5). Verify that these updates agree with change authorization records and procedures.

 

 

 

3

Obtain the names of key system files from the data center staff. To detect access to these files, use the file History Search (6.5). Note the job name, program name, date, time, and type of access for each file.

 

 

 

4

Verify that the information about file access that you obtained in Step 1 agrees with Operation’s schedules and shift logs.

 

 

 

5

Determine if any of the file accesses found in Step 1 were by programs other than the normal production programs, such as superzap or test programs.