AIX auditing

In our customer place somebody removed and PV from the server. I want the information like which user removed this PV.

Is there any way to get PV removal information.

When did the PV removed from the server ?

Whether AIX auding will help ?

Where i can get these information ?

Thank you

I thought only root could remove a PV... or are you saying someone you let in went to your datacenter and removed a PV from one of your server?

If you are not more clear and specific it will be difficult to give you a usefull answer...
(What type of server - OSLEVEL - disk: physical or SAN? etc...)

The PV would have to be free from use, or do you mean physically stole it? I SAN LUN is more likely I suppose, but you are then after the LUN id. What symptoms do you have? Is there a disk listed as "missing" or "defined" when you use lspv or lsdev -Cc disk ?

Can you explain a little more?

Robin