Mainframe, MVS and zOS Discussion

Hi - Can we identify the user who deleted a record from a table in IBM DB2? What is command to get it or do we need to do some setup before we can get this information. Please advise.

If you've audit facility turned ON beforehand prior to record being deleted, you might capture it. The audit trace enables you to trace different events or categories of events by authorization IDs, object ownership, and so on. And when you start the trace, you choose the events to audit by specifying one or more audit classes. Description of them can be found here:

https://www.ibm.com/support/knowledgece ... trace.html

OTOH, if you some tools like CA Log Analyzer or Platinum Tool - they might also allow you to look for such an information but I can not confirm for sure.

Thanks Anuj.

Can we get some information from DB2 logs too?

Logs would not really give information on "who did it" but "what happened" can be answered mostly, AFAIK.

Thanks Anuj.

You're welcome.