ADF - BC Business transaction auditing/logging plugin/tool needed

Hello,
Project that I am currently working in requires to Log any transactions (add / delete / update) or any modifications to the database by users done form there login/account (point to note here is that users have different account at application level where as they connect to the database through the same schema/user). I need a logging plugin/software or something that can easily be integrated in my current Framework (ADF - BC) and supports the IDE (JDeveloper) saving all the changes to a database so that any change can be traced or monitored.
I am using ADF Faces - Business Components and nothing else (and JDeveloper Ofcourse).
Asad Imtiaz.

I don't know if is the same issue or solution. I'm using a linux (FC7) and setting the enviroment variable TZ='America/Buenos_Aires' works for me.

Similar Messages

Security Audit Log FULL. What happens??

Hi there,
Can anyone tell me what will happen when the Security audit Log file is full on OS-level. Will the system stop? Is the file overwritten?
Best regards,
Joris

Hello Joris ,
1 ) Is the file overwritten? -> No
2 ) Will the system stop? -> Yes , if there will no free space on drive / file system SAP system will stop.
How to delete :
1.      To access the Security Audit Log reorganization tool from the SAP standard menu, choose Administration à System Administration à Monitor à Security Audit Log à Reorganization.
The Security Audit: Delete Old Audit Logs screen appears.
       2.      Enter the Minimum age of files to delete (default = 30 days).
This value must be > 3.
       3.      Activate the To all active instances indicator to delete the audit files from all application servers. Leave the indicator blank if you only want to delete the files from the local application server.
       4.      Activate the Simulation only indicator if you do not actually want to delete the files. In this case, the action is only simulated.
       5.      Choose Audit Log à Continue
Regards ,
Santosh Karadkar

Datasource for BUS2000249 business transaction catagory.

Hi Experts,
I am working on CRM extraction, I need to capture the data from T-Code CRMD_ORDER screen in crm.
As data is catagorised according to tranasction catagory , I know that 0crm_sales_act_1 holds the data for
business transaction object type is BUS2000126.
Similarly I want to know which CRM datasource hold data for BUS2000249 business transaction catagory.
Acthually i need to capture the Contract data in CRM.
Thanks
Mayank

there is no such BC for vendor available but still you can check out 2LIS_02_S013, 0MM_PUR_VE_01
and 0MM_PUR_VE_02. They may help.
for me its good to go for a custom extractor with View based on those table. that will be quick and best.

Set to Upload Audit Log Entries into particular Library Programatically

Hi,
We got a requirement where need to set the Library to which the Audit Log needs to store.
By default in OOB, we have option as Browse and Set the document Library for Auditing any Site/Web/List. But in SPAudit class we couldn't find any related Methods/Properties to which we can set where this Audit Log entry should need to happen.
Could anyone help us asap.
Dinesh Pulugundla, Microsoft Certified Technology Specialist.

I don't know if that functionality is available programatically. My guess is SharePoint uses SPAudit.GetItems() or the SPAuditQuery class to query the
events and outputs as a Excel (CSV) file to the library you specify.
You could try recreating this process in your code.
Jason Warren
Habanero Consulting Group
habaneroconsulting.com/Insights
@jaspnwarren

SQLException in the audit log for the Message Display Tool

Hi
I´m newbie in PI Technology, and i have some issues when i try to do the next.
This is the scenario:
I need to communicate two systems, for one side i have SAP, and for the other side i have ADI (legal system) so, i use PI to do this (the communication), PI receive the data from SAP by means abap proxy, until this everything is correct, then i do the mapping of the data and i send a message to ADI (with the SAP XI Runtime Workbench) by means JDBC adapter, if i check the sended message with "Message Display Tool" show that the message was sent (status "Delivered") but if i check the received messages option, in the audit log displays the five next errors:
Error: Could not execute statement for table/stored proc. "FADIA4" (structure "StatementFADIA4") due to java.sql.SQLException: FADIA4 in FILEMET not valid for operation.
Error: JDBC Message processing failed, due to Error processing request in sax parser: Error when executing statement for table/stored proc. 'FADIA4' (structure 'StatementFADIA4'): java.sql.SQLException: FADIA4 in FILEMET not valid for operation.
Error: MP: exception caught with cause com.sap.engine.interfaces.messaging.api.exception.MessagingException: Error processing request in sax parser: Error when executing statement for table/stored proc. 'FADIA4' (structure 'StatementFADIA4'): java.sql.SQLException: FADIA4 in FILEMET not valid for operation.
Error: Adapter Framework caught exception: null
Error: Delivering the message to the application using connection JDBC_http://sap.com/xi/XI/System failed, due to: com.sap.engine.interfaces.messaging.api.exception.MessagingException: Error processing request in sax parser: Error when executing statement for table/stored proc. 'FADIA4' (structure 'StatementFADIA4'): java.sql.SQLException: FADIA4 in FILEMET not valid for operation..
if there are somebody that maybe could know what is the problem?, could the problem be the side of the legal system?, because inside of PI when i do the Test Configuration in the Integration Directory, the end of the test is successful.
Any comment is well received!!
Thanks,
Vicman
P.D. sometimes the error is: java.sql.SQLException: Token ) was not valid. Valid tokens: DAY PATH YEAR LABEL MONTH OPTION RESULT CONNECTION TRANSACTION.
what does it means?

Hi Pooja,
thanks for you quickly response!
XML sended:
<?xml version="1.0" encoding="UTF-8"?>
<ns0:MT_PgDocVentaECC_req xmlns:ns0="http://gmodelo.com/ECC/enviarCobranza">
   <DT_DatosDeControl>
      <MIDDLEWARE_ID/>
      <QUICK_ID/>
      <INTERFACE_NAME/>
      <MESSAGE_ID/>
      <LOG_ID/>
      <USER_ID/>
      <SOURCE_SYSTEM/>
      <TARGET_SYSTEM/>
   </DT_DatosDeControl>
   <DT_PagoDocVentaECC>
      <VKORG>TVKO</VKORG>
      <VKBUR>TVBUR</VKBUR>
      <VKBUR1>TVBUR</VKBUR1>
      <ROUTE>TVRO</ROUTE>
      <ROUTE1>TVRO</ROUTE1>
      <BLART>Q</BLART>
      <BELNR>100</BELNR>
      <WRBTR>200</WRBTR>
      <LFART>100</LFART>
      <VBELN>100</VBELN>
   </DT_PagoDocVentaECC>
</ns0:MT_PgDocVentaECC_req>
this is the XML received:
<?xml version="1.0" encoding="UTF-8"?>
<ns1:MT_PgDocVentaADI_req xmlns:ns1="http://gmodelo.com/ADI/recibirCobranza">
<StatementFADIA7>
<FADIA7action="INSERT">
<Table>FADIA7</Table>
<Access>
<NUMCIA>123</NUMCIA>
<NUMALM>234</NUMALM>
<SUBALM>300</SUBALM>
<CVETOP>16</CVETOP>
<FOLOPV>22</FOLOPV>
<SECOVA></SECOVA>
<IMPOVA>200</IMPOVA>
<ALMOVA>5678</ALMOVA>
<SUBOVA>21</SUBOVA>
<TOPOVA>21</TOPOVA>
<FOPOVA>41</FOPOVA>
<FECOVA>100</FECOVA>
<STSOVA> </STSOVA>
</Access>
</FADIA7></StatementFADIA7>
</ns1:MT_PgDocVentaADI_req>
what do you think about it?, anything wrong?

Security Audit Log SM19 and Log Management external tool

Hi all,
we are connecting a SAP ECC system with a third part product for log management.
Our SAP system is composed by many application servers.
We have connected the external tool with the SAP central system.
The external product gathers data from SAP Security Audit Log (SM19/SM20).
The problem is that we see, in the external tool, only the data available in the central system.
The mandatory parameters have been activated and the system has been restarted.
The strategy of SAP Security Audit Log is to create many audit log file for each application server. Probably, only when SM20 is started, all audit files from all application servers are read and collected.
In our scenario, we do not use SM20 since we want read the collected data in the external tool.
Is there a job to be scheduled (or something else) in order to have all Security Audit Log available (from all application servers) in the central instance ?
Thanks in advance.
Andrea Cavalleri

I am always amazed at these questions...
For one, SAP provides an example report ( RSAU_READ_AUDITLOG_EXTERNAL ) to use BAPIs for alerts from the audit log yet 3rd party solutions seem to be alergic to using APIs for some reason.
However, mainly I do not understand why people don't use the CCMS (tcode RZ20) security templates and monitor the log centrally from SolMan. You can do a million cool things in SolMan... but no...
Cheers,
Julius

Any SAP tool that will perform audit logging views of personal data?

Hi,
I am wondering if there is a SAP tool or a third party tool that will perform audit logging of end users when viewing personal data?
The audit record should contain: who is viewing, what data is being viewed and the date/time stamp.
This is required to meet data privacy legal requirements.
Janet S.

There is a T-code SM20, through some requirement can be fulfilled.
Regards,
Subhash

Regd. Security Audit log

Hi,
We have a requirement from business to activate Security audit log for all Business users. We have around 160 Business users but in SM19 I am able to set filters for only 10 users maximum.
Also I tried creating 16 profiles and maintained 10 users each but still I was able to activate only one profile at a time.
If I put * in the user tab then system starts logging for all users including our ESS users. But we don't want to log for ESS users as there are 1000+ ESS users which will affect the growth of the security log as well the performance.
Please suggest is there any way to enable security log only for around 160 users using SM19.
Regards,
Nalla.

> Thanks for the update. But rsau/user_selection will not help us because our user ids are similar to our employee ids and we cant use wild card option like RFC* or ESS*.
I thought it worth mentioning, to consider for next time...
> Also in detailed selection option in SM19, i tried removing the RFC related options but still when our ESS users login, it is getting logged.
Possibly it is logging the RFC call and not the RFC authentication. Try the other way around and filter out the successfull logins in SM20N.
> Is there any way we can restrict using user group or licensing type?
No, not to my knowledge.
> Will it be a minor development if I ask our ABAPER to create a Z Tcode similar to SU19 by including user group or is there any user exit which can help us to put restriciton on user group wise.
You can make the screen program glow in the dark in a Z-tcode, but the location where the log is written is not accessible to you and that is where the music is.
The best option is to set a carefully chosen and tested filter in SM19 which covers your requirement without stopping the log, and then use SM20N to filter a subset of that.
You can also define the selection methods and reaction methods in transaction RZ21 and then activate them in a monitoring template in RZ20. This way you are faster and will only see what you want.
You can also do the same in Solution Manager for the managed systems and have a central monitoring and reaction from there. Then you are on the right track in my opinion.
Cheers,
Julius

Follow-up Business Transactions

Hi Experts,
I have a problem with follow-up transactions. I created two transactions, a Quotation and a Standard Order.
Then I created follow-up for these transactions in the copying control, ZAG --> ZTA. Now, when I create a new Quotation in the Web Client UI and I open the drop down list "create follow-up" I just can see many diferent activities like Contact, Task, incoming e-mail, etc. but no Business Transaction.
How can I display the new created Business Transaction ZTA (Standard Order) in the drop-down list?
Hope sb can help me.
Thanks.
Sebastian

Hello Sudeep De,
Thanks for your reply but thats not the problem.
Also in the standard I have the same problem. The standard also defines follow-up transaction for AG (Quotation), AG --> TA (Standard Order) in the copying control. When I log in whith the role salespro and I create a new Quotation, save this Quotation and try to create a new Standtard order with the drop-down list "create follow-up", I just can see activites but no Business Transactions. Why can I just see activities (Task, ...) and no Business Transaktions? All these activities I can see are not defined in the copying control.
Can you help me?.
PS: I can find my Business Transaction in the Web Client UI. I just can not find the Transaction in the "create follow-up" List as a follow-up transaction
Edited by: Sebastian Wilhelm on Oct 1, 2008 11:48 AM

SEE TRANSACTION 2KES LOG - USER WHO HAS DONE POSTINGS ON PERIOD 0

HI,
how can i see the user who launched the 2kes on a specific company? Unfortunaltely the transaction has no log at all .
Furthermore , I've tried to see the line items in GLPCA but for postings on period 0 no line items are displayed . I've found something on GLPCT , but no user is displayed there . I want to get the user who executed it last time . Is it possible to retrieve one way or another?
Thanks and Regards

HI,
try T-code ST03N. Mark the ABAP instance you are using, go to "detailed analysis/business transaction analysis" and enter the selection parameters according to your requirement.
Best regards, Christian

Enhance Business Transaction with table

Hi,
I have to enhance a Business Transaction (Sales Contract) with a table, but I can´t see this option nor EEWB or AET. I can add fields in both tools, and I can also add a table, but only for BUPA, not in Business Transaction. This table for add is going to be viewed in WebUI.
What can be done?. Thank you in advance for your help.
Regards,

HI,
You can create this using AET table. Fiest open your Sales Contract Document then click Configuration butoon you have to choose which area to configure afetr that you will get popup in that click enhanced fields there you can see
Regards,
Deepika.

"logon time" between USR41 and security audit log

Dear colleagues,
I got a following question from customer for security audit reason.
> 'Logon date' and 'Logon time' values stored in table USR41 are exactly same as
> logon history of Security Audit Log(Tr-cd:SM20)?
Table:USR41 saves 'logon date' and 'logon time' when user logs on to SAP System from SAP GUI.
And the Security Audit Log(Tr-cd:SM20) can save user's logon history;
at the time when user logged on, the security audit log is recorded .
I tried to check SAP GUI logon program:SAPMSYST several ways, however,
I could not check it because the program is protected even for read access.
I want to know about specification of "logon time" between USR41 and security audit log,
or about how to look into the program:SAPMSYST and debug it.
Thank you.
Best Regards.

Hi,
If you configure Security Audit you can achieve your goals...
1-Audit the employees how access the screens, tables, data...etc
Answer : Option 1 & 3
2-Audit all changes by all users to the data
Answer : Option 1 & 3
3-Keep the data up to one month
Answer: No such settings, but you can define maximum log size.
4-Log retention period can be defined.
Answer: No !.. but you can define maximum log size.
SM19/SM20 Options:
1-Dialog logon
You can check how many users logged in and at what time
2-RFC login/call
Same as above you can check RFC logins
3-Transaction/report start
You can see which report or transaction are executed and at what time
(It will help you to analyise unauthorized data change. Transactions/report can give you an idea, what data has been changed. So you can see who changed the data)
4-User master change
(You can see user master changes log with this option)
5-System/Other events
(System error can be logged using this option)
Hope, it clear the things...
Regards.
Rajesh Narkhede

Business Transaction control based on equipment status

I have created status profile for equipment creation . One of the user status is "Created by User" . Now If the user status of the equipment is this , I want to disallow notification creation through iw21 on this equipment .
Please explain in detail how to achieve this through transaction control in status profile (I have already tried object type "maintainence notif " etc in status profile ....but did not find transaction create notification which has to be forbidden .)..
Also please explain how to view transaction code along with business transaction in transaction control screen ..(any alternate way ?)
NPB

hi
kindly specify the object type as Equipment and check
I am not sure, kindly mark the Create Log Notification as forbidden for the user status
regards
thyagarajan

Date time in the transaction access log of ST03N

Hi,
How do I get date time in the log of transaction access by user.
in transaction ST03N
Pls let me know if any other transaction is available there
I can get transaction access logs userwise.
Points will be rewarded.
Thanks

Hi,
SM19 - Configuration / SM20 - evaluation (if audit log maintained) will fetch the date and time of tcode accessed by user.
Rakesh

I got warning in audit log but I don't get any alerts...

Hello,
I have File Adapter sender with FCC.
Because I was curious how FCC will behave when invalid file is used as a source file.
I deleted much of the contents in the source file and the File adpater with FCC read it.
In communication channel monitoring in RWB, I got this message in Audit log.
"Empty document found - proceed without sending message".
However, I cannot find this message anywhere else... Either in Message Monitoring (RWB) or SXMB_MONI (SAPGUI).
Also, I don't get any alerts.
How do I get alerts when file is not processed by file adapter?
Also, how do I view alert view for this kind of error?
Thank you.
-Won

Hi Won,
I suppose that you have checked alredy that your alerts are setup correctly and rules are defined for it.
First, you might set the log level of the file adapter to debug - you should see the issue in the NWA log.
Should PI try to generate an alert but fails, you would also see it here and locate your problem.
But, my opinon is that your chances are not very good to get an alert in such case. SAP decided for which issue they issue an alert and for which not.
When you have an empty file in the file adapter, it seems that SAP thiks that this is not to critical and therefore they don't issue an alert.
The reason why you dont see it anywhere else is, that the adapter generates a message id only when there is something to make a message. Empty file means no message and you can not see it in the monitoring tools.
best regards,
Markus

ADF - BC Business transaction auditing/logging plugin/tool needed

Similar Messages

Maybe you are looking for