Need your help its urgent

[calal]

Hello everyone,
I am a complete newby and not really into IBM TSM so this question might sound stupid but i really need your help. I was wondering if it was possible to create reports on the activity of the server (what documents were deleted, which one were genereted, by which user, etcc...) is this possible????
Thanks in advance
Calal

[moon-buddy]

What do you mean by "what documents were deleted, which one were genereted, by which user, etc."?

TSM does not work with documents but by filespaces.

Please clarify.

[calal]

I want to check which user did what in the last three months (changing documents etc...) but i guess the TSM doesn't save any info on that is that correct

[Sunhillow]

Hi calal,

such info is stored in the client logfile. Per default it is called dsmsched.log.
But keeping it for 3 months may let it grow to an unmanagable size if you have a large number of files to backup.

[jcarlock]

Even with the dsmsched.log, I don't believe that TSM holds that kind of audit info, i.e. - what user deleted the file. You could find out when it expired, etc, but TSM does not keep that kind of user level info.

For windows file shares, there are usually additional tools you can use to monitor file changes, etc.

[Sunhillow]

jcarlock, you are right.
The dsmsched.log only contains info on which files have been changed, not by whom.

[calal]

Well but those dsmsched.log files are on the server or on the machines of the local client.
SOrry if these questions might sound stupid but i am completly new to this area and need to find a way on how to see which files habe been deleted between two back ups.
thanks for the help

[cjhood]

The dsmsched.log will be on the client machine. But again, TSM won't be able to get what you're looking for, you need an auditing tool for that type of information.

[dms19]

Well but those dsmsched.log files are on the server or on the machines of the local client.
SOrry if these questions might sound stupid but i am completly new to this area and need to find a way on how to see which files habe been deleted between two back ups.
thanks for the help

You can extract what files have been deleted using the restore portion of the GUI (they show up with files denoted with a little "x" however you cant tell who deleted them. You simply have to step through the Point In Time restore going back one day at a time.