The TSS9209I AUDIT FILE HAS WRAPPED message is occurring frequently. Is this causing a loss of data if the message is occurring more than once a day?
If the audit file is wrapping more than once a day, it is possible data is lost. The following is recommended:
Run TSSUTIL with EVENT(ALL) to see what's being logged. Decide if everything that is logged should continue to be logged. If not, take out the source of the logging.
For example, LOG(ACCESS) logs all resource accesses except a few resources. If it is not desired to have all these accesses logged, take ACCESS out of the LOG control option.
If it is desired to have everything logged, continue to be logged, then do one of the following:
When one file wraps, a TSS9203I SWITCHED TO AUDIT/TRACKING OUTPUT FILE dddddddd is issued and the new audit records are written to the other file.
An automations package could be set up to intercept this message and backup the audit file from the file that just wrapped.