Adding entries in Audit Log Tab in Component Monitoring under Runtime Workb

Hello Experts,
I am trying to add my own audit log entries to the Audit Log Tab under Runtime Workbench -> Component Monitoring. I found this sap help link (http://help.sap.com/saphelp_nwpi71/helpdata/en/3b/6fe540b1278631e10000000a1550b0/frameset.htm) I am not sure if i am going in the right direction or not. But, when I tried to use the code in my User Defined Function in Message Mapping it gives me java error on PublicAPIAccess.
Can anyone please let me know what am i doing wrong or if I am going in a totally wrong direction to achieve me goal.
I am using PI 7.1 without EP1 and my example uses File adapter.
Thanks!!

Hi,
if you are trying to add custom audit log for system monitoring in RWB in component monitoring, then i think it is not feasible........moreover for this thing, you can ask your basis guys to configure CCMS in your XI system to recieve alerts for your system.............
if you are trying to add custom audit log msgs for your msg processing, then you should develop a custom J2EE adapter module and add your audit log entries in the process method of your adapter module..............
Regards,
Rajeev Gupta
Edited by: RAJEEV GUPTA on May 6, 2009 7:12 AM

Similar Messages

Audit log in communication channel monitoring(MDT)

Hi,
I am doing a soap lookup in my message mapping for an interface.In order to monitor the request and response communication , I am unable to see the 'Audit Log' for the soap communication channel that was configured for the same.On clicking the message id for viewing the audit log,an error page is displayed as "Requested Page not found"
Could you please help me as to why I am unable to see the Audit Log.
Regards
Janice

Hi! Janice,
Could you guide me as to where I can set the parameter for sync logging in AE
You can got to
1) T Code: SXMB_ADM
2) Click Integration Engine Configuration
3) Again click Configuration
4) Now Keep the parameter as TRACE_LEVEL = 3 instead of 0 or 1 or 2.
then again go to SXMB_MONI there you can view now SOAP Request and Response.
I hope now it is resolved right
Regards
Amar Srinivas Eli

Error in Runtime Workbench, Component Monitoring, Proxy Runtime

Hi,
I have the following error in the Runtime Workbench, under Component Monitoring->Integration Engines->Proxy Runtime. The error message is Ping Status: Unable to logon to system xxx in language EN with user XIRWBUSER. However, I am unable to find out where the account and password are specified in order to correct this. Any help would be appreciated.

Hi,
it can be for some system configured on http destination or the sld system configured for this server.
take a look at tx sxmb_adm for the http destination to discover witch destination is been used. then, on sm59, find the server that is been called for this http destination and check on that server if this user is ok there.
to check sld, go to tx sld_apicust discover witch is the sld system configured for this server. After log on to sld system and check the user.
Maybe the user is ok on the destination system, so, check the password on sm59 (if the problem is with an http dest) or sld_apicust (if the problem is the connection to sld).
regards.
roberti

Diff bteween trace,log and audit log

Diff bteween trace,log and audit log....?
Harsha

Hi,
Audit Log :The adapter engine uses the messaging system to log the messages at every stage, This log is called the Audit Log.
The audit log can be viewed from the runtime work bench(RWB) to look into the details of the life cycle of the message. During our journey we will also have a look at the messages that are logged at different stages.
Audit logs are mainly used to trace our messages. In case of any failures, we can easily trace where message stands. we can give the entries for the logs in UDFs, custom modules etc..
Audit logs are generally gives us the sequence of the steps from where the message is picked up with file name and path and how the message is sent to the I.E pipeline..it also shows the status of the message like DLNG,DLVD like that...generally we look into the audit logs if there are any errors in message processing...
It gives the complete log of your message.
Go to RWB --> Component Monitoring --> Adapter Engine --> Communication channel Monitoring --> Select the Communicatin channel --> click on use filter --> then click on the Message Id.
Trace Log:
Log file:
A log file contains generally intelligible information for system administrators. The information is sorted by categories and is used for system monitoring. Problem sources or critical information about the status of the system are logged in this file. If error messages occur, you can determine the software component that has caused the error using the location. If the log message does not provide enough details to eliminate the problem, you can find more detailed information about the error in the trace file.
The log file is located in the file system under
"/usr/sap/SID/instance/j2ee/cluster/server[N]/log/applications.[n].log" for every N server node.
Access the file with the log viewer service of the J2EE visual administrator or with the standalone log viewer.
Trace file:
A trace file contains detailed information for developers. This information can be very cryptic and extensive. It is sorted by location, which means by software packages in the Java environment, for example, "com.sap.aii.af". The trace file is used to analyze runtime errors. By setting a specific trace level for specific locations, you can analyze the behavior of individual code segments on class and method level. The file should be analyzed by SAP developers or experienced administrators.
The trace file is located in the file system under
"/usr/sap/SID/instance/j2ee/cluster/server[N]/log/defaultTrace.[x].trc" for each N server node.
Access the file with the log viewer service of the J2EE visual administrator or with the standalone log viewer.
Thanks
Virkanth

Access request Audit log

Hi experts,
For all the access requests we are getting the complete audit trail and Even we will get whether Risk Analysis is scheduled in the Workflow.
But is there any possibility to get the output of Risk Analysis in the audit trail?
Please suggest.
Thanks,

Hi Sriram,
in standard solution what you can see in audit log is the information risk analysis during access request was executed, there is no standard way to see this information in audit log.
If you go for abap customization, please note this information is usualy very big and long and adding it to audit log my simply make audit log unclear...and very much complicated.
Hope this helps,
Filip

Audit log is empty in RWB CC Monitoring

Hi experts,
I am facing a problem with the message monitoring in the RWB. The Audit Log tab for the message details has nothing while the Message Content and Message data contain information about the message. I have set the parameter message.auditLogEnabled to false for the service com.sap.aii.af.svc in the NWA and restarted the instance but with no luck. Please help me out.
Regards.

Hi Prateek,
That parameter was 'true' by default.
As per this blog,
http://www.sdn.sap.com/irj/scn/weblogs;jsessionid=(J2EE3417800)ID0321728450DB01035845556380020404End?blog=/pub/wlg/13456
I changed it to 'false'. The persistence of messages is 24 hours, which is fine.
I am now trying to look at the table XI_AF_MSG_AUDIT. It has about 800K records in it, in which about 80k have 'DLNG' as their status. Do you think this is causing any problem?
Regards.

RWB - Component Monitoring - Integration Engines = none ???

Hi.
I made a Business System in SLD.
Name: DEV_410
Role: Application System
Related Integration Server: XHD_100       (XI Server)
Technical System: DEV on dev60           (type: Web AS ABAP)
Client: 410 of DEV
Logical System Name: HMXDEV410
But I cant see the business system in RWB - Component Monitoring - Integration Engines. There shoud be 'Proxy Runtime DEV_410' in Integration Engines, I think.
Is there any wrong in SLD or RWB?
Thanks in advance.
sjyoon.

Hi
Go to SLD select your business system :DEV_410
And check the following entries for your business system
Role:   Application Server
Related Integration Server : (Check if this value correctly configured to your Integration Server client)
If this configuration is correct, this means XIRWBUSER is able to connect to the proxy runtime of application systems(DEV_410). Then there will be no entries displayed under RWB - Component Monitoring - Integration Engines in RWB.( that is how my RWB component monitoring is configured)
Only error entries are displayed under RWB - Component Monitoring - Integration Engines in RWB. Say for example XIRWBUSER is not able to connect to the proxy runtime of application systems(DEV_410). Then you see a entry in RED below your RWB - Component Monitoring - Integration Engines
Satish

RWB component monitoring WARNINGS

in component monitoring under integration server the INTEGRATION ENGINE i was diaplayed with some yellow LED saying that some waring..
for this INTEGRATION ENGINE when i checked for status again SELF_TEST STATUS in yellow LED. and the result of SELF TEST showing IS WEB SERVICE SECURITY AVAILABLE? IN YELLOW LED.
WHEN I went for details for IS WEB SERVICE SECURITY AVAILABLE? i was displayed with communication error proxy calls are not permitted on sender or reciever side on IS(client)
what is this error .. how to overcome this..
INTEGRATION ENGINE should be dispalyed in GREEN LED..
plzz help me in this regard..

Hi,
Try the below latest config guide
https://www.sdn.sap.com/irj/servlet/prt/portal/prtroot/com.sap.km.cm.docs/library/soa/soa-management/exchange-infrastructure/xi-design_configuration/configuration%20guide%20-%20sap%20exchange%20infrastructure%203.0.pdf .
check 12.4 in the document .
but i've observed though you have warning it works fine.
Satish

Customizing Audit Log Report - Adding/Removing Columns from Display

Hi All -
Has anyone tried adding/removing the columns from Out of Box Auditi Log report with minor customizations to the code/configuration files ? Right now , when the Audit Log report is executed, there are numbe of columns that appear on report (Server, Client IP etc) which are too technical for the client and requirement is remove some of these and add some more for the attributes that we are audit logging through Audit workflow service. If you have done something similar in the past, please provide me with some inputs. Any sample code, examples will be highly appreciated.

Hello Gurus,
I also have same kind of requirement.WE have to send a monthly report to customer where number of users created and deleted to be given to them.
Its urgent.Please help
Thanks in advance

Trace level of RWB's Message Monitoring - Detail Message - Tab "Audit log"

Hi,
My flow is: File -> PI -> Transformed File with seeburger module. Everything is good except the trace level in RWB.
Exactly, in our PI production, under RWB -> Message Monitoring, when I select a message (e.g PI -> Outside) and see its Detail, under tab "Audit Log", I have a log with only 2 pages (which corresponds to the sender part "File -> PI")... whereas in our PI pre-production, I have 4 pages for the exact same flow, on which I have also info of the receiver part "PI -> Outside"...
My question is just: do you know which parameter is involved in this trace level of RWB's Message Monitoring Detail log ?
regards.
Mickael
Note: in [Help SAP|http://help.sap.com/saphelp_nw04/helpdata/en/fd/16e140a786702ae10000000a155106/frameset.htm], I see only this sentence "Audit Log: The audit log for the selected message is displayed as the default setting.".
Edited by: Mickael Huchet on Oct 18, 2011 1:59 PM

Hi Shabarish,
Thanks that will help to localize my search.
else by hazard, you don't know which parameter in this tree is for the "Audit Log"?
coz I did a quick look in prod and pre-prod, but it seems the severity is the same (e.g "Info" for most of them) whereas the trace level of "Audit log" is different.
Thanks for
Regards.

Problem with the XI-Audit log entries in the table "XI_AF_MSG_AUDIT"

Hi,
I have an async-szenarios for PO:
We send Idoc's from SAP ERP to a WebService via SOAP. And we take Ack's. We use Integrationsprocess with deadline block to catche the errors after the retrying (three times) and to send they via e-mail.
Our problem is, the number of the audit logs in the table "XI_AF_MSG_AUDIT":
In the RTW only we see one audit log (with three retries) in an error case. But in the table XI_AF_MSG_AUDIT there are about 76 entries for the same audit log in the error case and about 20 entries in the case of the succuessfull processing.
This number of the entries in the table causes problem with the size of the redo log file and delete job of cours the large size of the table and therefore problem on the data base. The table can not be controlled. The delete job can not run and cancels every time due this redo log problems
What can cause that?
How can it be prevented, that so much entries are not be made in the table "XI_AF_MSG_AUDIT".
Best regards
Gueltekin

Hi Gueltekin,
I am only aware of the general property auditLogEnabled of J2EE Engine Service SAP XI AF Core, which controls in general (default = true) that entries in the AF Message Audit log are written at all.
(see [http://help.sap.com/saphelp_nw70/helpdata/en/5c/22ee41c334c717e10000000a155106/frameset.htm|http://help.sap.com/saphelp_nw70/helpdata/en/5c/22ee41c334c717e10000000a155106/frameset.htm])
I assume that your scenarios in the error case is sending up to three messages and for each message the number of audit log infos are created. You might want to check the detailed entries in the log and see from where they are comming, you might use customer modules etc. as well.
Best regards,
Silvia

Each Document in Audit Log entry

Hi,
There is document library of name testdoclib in the site.
There are three files under the document library with names file1,.file2 and file3.
Users are downloading/viewing only file1,file2 files alone.
Now in the audit log entries,will i be able to view file3 entry as well?
In the audit log,will the entries be of files which are viewed/downloaded by the users?
Please share inputs on the same.
Regards,
Sudheer
Thanks & Regards, Sudheer

Hi Sudheer,
The log entries are captured for viewing, downloading or opening the document only or checked out or check-in. In your scenario, file3 entry will not be there until and unless any of the above mentioned actions happened.
Please refer to the following article.
https://support.office.microsoft.com/en-us/article/View-audit-log-reports-4293e8d5-4e7d-4201-b8ac-c8e63a100131?CorrelationId=d11e5086-013b-4416-a066-df51f22ff6fe&ui=en-US&rs=en-US&ad=US
Please don't forget to mark it as answered, if your problem resolved or helpful.

Write multi-language entries to central Audit Log

Hi there!
For my custom XI adapter module, I need to write multi-language log entries to the RWB Audit Log. Therefore I created some resource bundle files with my message texts.
But at runtime of my module, I cannot know the language of the user, who accesses the log via his web browser.
Is there any possibility to provide custom resource bundle to the central audit log?
Thanks in advance!
Matthias

Matthias,
The idea behind using various resource bundles will work fine when you would detect the Locale of the user accessing RWB and load appropriate resource bundle. In most of the web applications based on Java this would be done automatically and you would not need to write exlplicit code for this but the Audit logs that you write from your adapter module would most probably be persisted to the database. At the most you would be able to persist the appropriate language messages by detecting the default locale in adapter module and retrieve values from corresponding resource bundle. Rest, your standard message display tool UI is automatically displayed in the appropriate language your browser sends to the server.
Hope this helps.
-- amol

Set to Upload Audit Log Entries into particular Library Programatically

Hi,
We got a requirement where need to set the Library to which the Audit Log needs to store.
By default in OOB, we have option as Browse and Set the document Library for Auditing any Site/Web/List. But in SPAudit class we couldn't find any related Methods/Properties to which we can set where this Audit Log entry should need to happen.
Could anyone help us asap.
Dinesh Pulugundla, Microsoft Certified Technology Specialist.

I don't know if that functionality is available programatically. My guess is SharePoint uses SPAudit.GetItems() or the SPAuditQuery class to query the
events and outputs as a Excel (CSV) file to the library you specify.
You could try recreating this process in your code.
Jason Warren
Habanero Consulting Group
habaneroconsulting.com/Insights
@jaspnwarren

Audit logs on Windows 2008 works different when file is modified from UNC path

Hello All,
Here i have a strange situation with the generation of audit logs when folders\files are changed locally(my computer) on the server (vs) from the UNC path
(\\servername\drive$\folder\....).
File Server : Windows 2008 R2.
Audting enabled and SACL set on the folder level.
Enabled advanced auditing for Audit Object Access and enabled the force sub category audit settings on vista \ window 2008 policy via GPO and also verified that the sub category is set.
also set SACL on one folder on the R drive. (\\servername\r$\<folder>\<audited folder>
auditpol /get /category:"Object Access"
Object Access : File System
Success and Failure
Situation : 1
When i make any manipulations (traversing \ listing \ adding or deleting folder or files) on the server locally from my computer ---> . r drive --> folder --> audited folder , i get the event id generated (4663) with all the correct
information.
For ex: created a new txt file.
Object: Object Server: Security, Object Type: File, Object Name: R:\Audits1\folder1\New Text Document.txt, Handle ID: 0xcb4
Process Information: Process ID: 0x1bac , Process Name: C:\Windows\explorer.exe
Access Request Information: Accesses: WriteData (or AddFile) AppendData (or AddSubdirectory or CreatePipeInstance) , Access Mask: 0x6
Situation : 2
When i make the same manipulations (traversing \ listing \ adding or deleting folder or files) on the server or remotely via the UNC path \\servername\r$\folder\audited folder or DFS share or \\servername\<sharename>
, i dont get the event id generated (4663) with the needed information.
For ex: created a new txt file.
Object: Object Server:
Security , Object Type:File ,
Object Name:
R:\Audits1\folder1\New Rich Text Document (3).rtf , Handle ID:
0xa3c
Process Information: Process ID: 0x4, Process Name:
Access Request Information:
Accesses: WriteData(or addfile), Access Mask: 0x100
In the second situation process name is empty (for the file events) and also found that the logs generated are very less compared to the first situation.
Please suggest if there is any fix with this.
Thanks,

Enable the following auditing on the server either through domain
policy or local policy:
Audit logon events - Success
Audit Object Access - Success
On the Auditing tab, add Everyone with the following audit settings.

Adding entries in Audit Log Tab in Component Monitoring under Runtime Workb

Similar Messages

Maybe you are looking for