AUDIT CONFIGURATION CHANGED : SLOT INACTIVE

Hello ,
We've configured security autid via parameters below :
rsau/max_diskspace/per_day:     1996800K
rsau/max_diskspace/local          2048000K
rsau/max_diskspace/per_file      665600K
rsau/enable                               1
rsau/selection_slots                     30
rsau/local/file D:\usr\sap\FKP\DVEBMGS00\log\++++++++.AUD
FN_AUDIT ++++++++######.AUD
DIR_AUDIT D:\usr\sap\FKP\DVEBMGS00\log
In our production system and we repaired security audit screens with abap consultants . Then we could activate audit log for 30 slots . It works very well . We restarted system several times and we didn't get any problem about security configuration .
After a few months , we restarted the system and the slots which we add later changed to inactive .You can see SM20 logs below :
Application Server Stopped
Application Server Started
Audit Configuration Changed
Audit: Slot 1: Class 191, Severity 2, User USER1, Client 200,
Audit: Slot 2: Class 191, Severity 2, User USER2 , Client 200,
Audit: Slot 3: Class 191, Severity 2, User USER3, Client 200,
Audit: Slot 4: Class 191, Severity 2, User USER4, Client 200,
Audit: Slot 5: Class 191, Severity 2, User USER5, Client 200,
Audit: Slot 6: Class 191, Severity 2, User USER6, Client 200,
Audit: Slot 7: Class 191, Severity 2, User USER7, Client *,
Audit: Slot 8: Class 191, Severity 2, User USER8, Client *,
Audit: Slot 9: Class 191, Severity 2, User USER9, Client *,
Audit: Slot 10: Class 191, Severity 2, User USER10, Client *,
Audit: Slot 11 Inactive
Audit: Slot 12 Inactive
Audit: Slot 13 Inactive
Audit: Slot 14 Inactive
Audit: Slot 15 Inactive
Audit: Slot 16 Inactive
Audit: Slot 17 Inactive
Audit: Slot 18 Inactive
Audit: Slot 19 Inactive
Audit: Slot 20 Inactive
Audit: Slot 21 Inactive
Audit: Slot 22 Inactive
Audit: Slot 23 Inactive
Audit: Slot 24 Inactive
Audit: Slot 25 Inactive
Audit: Slot 26 Inactive
Audit: Slot 27 Inactive
Audit: Slot 28 Inactive
Audit: Slot 29 Inactive
Audit: Slot 30 Inactive
We didn't change any parameters or audit configuration before restart   but as I said , after restart audit configuration has changed.
Does anyone has an idea about why audit configuration has changed ?
Thanks & Regards
Ozlem Otunctemur

Özlem Ötünçtemur wrote:
rsau/selection_slots 30
... we repaired security audit screens with abap consultants .
Have you considered that these ABAP consultants might have made a mess?
The selection slots does not support more than 12 tabs and thankfully your ABAP consultants can't "repair" the SAP kernel which writes the log.
You should read SAP Note # 7 in this case and ask SAP for assistance.
Cheers,
Julius

Similar Messages

Configuration Change Audit Report in Prime Infrastructure 2.1

Is there any plan to implement a Configuration Change Audit report in future releases of Prime Infrastructure (ie. 2.2)? When I go into the Reporting area and run a Change Audit report under the Compliance section it doesn't give me any information in regards to configuration changes, only inventory changes. There are managers who would like the ability to receive an e-mailed report of configuration changes within a 24 hours period. Currently the only way I can tell that you can get this information is by logging into Cisco Prime and going to Network Audit under Operation / Device Work Center.
Thanks,
Brian

Configuration Change Management (with Baseline Compliance reporting) is projected for the next release after 2.2. As of now that's projected to be ca. April 2015.
On a side note, last I heard, 2.2 should be out in the next couple of weeks.

Looking for a programmatic/command line approach to auditing registry changes

http://www.microsoft.com/resources/documentation/windows/xp/all/proddocs/en-us/regedit_audit_key.mspx?mfr=true
I'm looking to enable auditing on registry keys, but not have the user have to manually go through this process. Can you do this via command line or something? I'm trying to write this into my program, and I need it to set auditing on certain registry keys.

Hi,
In addition, we might enable the following audit group policy settings to audit registry changes:
Global Object Access Auditing
Under computer configuration/ Windows Settings/Security Settings/Advanced Audit Policy Configuration/
For more information regarding Global Object Access Auditing, please see:
Registry (Global Object Access Auditing)
Global Object Access Auditing is Magic
Best regards
Michael Shao
TechNet Community Support

Fixed Asset Auditing Configuration

Dear All,
I need a help for doing Fixed Asset Audit Configuration.
Any one kindly give me a guide line for how to do the step by step configuration for Fixed Asset Auditing and view the audit report
Thanks & Regards,
S. Umamageshwaran

Steve,
please see my response below.
Cost
1440
Dep. Per yr
120
Dep. Per month
10
Year
Cost
Dep
NBV
1
1440
-20
1420
2
-120
1300
3
-120
1180
4
-120
1060
5
-120
940
6
-120
820
7
-120
700
8
-120
580
9
-120
460
10
-120
340
11
-120
220
12
-120
100
13
-100
Legacy data
Assuming that you will load everything on 1/1/Y4
Cummulative acq
Accum dep
1440
-260
Assuming that you will load everything on 5/1/Y4 << so I assume you will load it on period 5
Cummulative acq
Accum dep
1440
-300
Accum dep in legacy will depend on when will you load the data. Take over date on this case is 4/30/Y4.
Thanks!
Jhero

Help me configure Change request management !!!

Dear friends,
I am Going to Configure Change request Management, so just to ensure that the configuration is not erronous, i would need Expert advise..
Just want to know Clear few things before i proceed..
I am also refering SPRO and related notes
Scenario :
I have two SYSTEMS SAP ECC 6.0 with System id R03 and Soluiton manager with SYSTEM id SOL,
R03 has 3 clients, 300 600 700..
In R03 300 is the development client, 600 is quality client, 700 is the production client.
SOL has 2 clients, 100, 200
With 200 as the production client.
Q.1) Do i have to configure CHARM in both the client (100 and 200 of SOLMAN).
Q.2) Initially I had tried to set CHARM in client 100 of solman, but later on realized that it has to be set up in client 200.
When i logon to client 200 and Execute IMG activity Spro-> sap soltion manger->basic settings-> sap solution manager system->activate integration with change request management.
Then by default it take the previous client ( client 100) as the change request management client.
( as we know there are three steps in the above activity ), the other activity are executed properly, only prblem being that the default client is always set to 100, which should not be the case).
I do get the prompt saying ( "The change request clent is set to clent 100, do u want to change to client 200, on clicking yes, still it is always set the same client 100 as charm client ")
Plz let me know what do i do to set the change request client to 200??
Q.3) Regarding TMS, we have local domain controller in solman and local domain in R3.
We are planing to establish domain links between the two systems( ie both the domain controllers) ??
Is this the right strategy ??
Any other method that u can recommend ??
Q.4)One of the IMG activity says, Generate Destinations to client 000 of all the domain controllers..
Whenever i do this these, destinations are created with errors, i am not able to create trusted RFC destinations without errors.
When i logon to satellite domain controler and excecute sm59 there are 2 destinations created Trusted and BACK.
These destinations works well,
but when i logon to Solman, got to sm59 , when i test the TMW and TRUSTED rfc destinations i test these destinations using Remote Logon i get error,
" no authorization to logon as trusted system"
I went thru one note which recomended Kernel upgrades to solve the problem,
I r3 my kernel relaese is 700 with patch level 56, the note recomends to apply patch 80, did u have these problems??
what is your kernel patch levels in sateliite and solman systems.
Q.5) TO be able to raise tickets from R3 to solman we create RFC destinations.
We also create RFC destinations to client 000 of all the sateliite system,
dont u think these RFC destinations might interfere with each other??
Q.6) Is there anyone who has successfully configured CHARM. Can you plz share the configuration documents with me..
Please note :
All the contributors would be handesomely rewarded with points .

Hi,
Check this
Note 128447 - Trusted/Trusting Systems
For your Q4.
Q3.)
Establishing Domain link - That's the right way. Go ahead.
These are the steps.
1.Define Transport Routes for System Landscape
assign exactly one development system to a production system, and that these two systems are connected by exactly one unique transport track. If a development system and a production system are connected by more than one transport track, this may lead to inconsistencies within the transport distribution. This type of transport configuration cannot be supported by Change Request Management, and may cause inconsistencies within the tools involved.
2. Activate Extended Transport Control
The CTC parameter should be '1'
3.Configure Transport Strategy
Deactivate the QA Approval.
4. Activate Trusted Services.
5.Activate Domain Links.
You have to activate domain link between systems.
6. Generate RFC Destinations to Client 000
Hope this helps.
feel free to revert back.
--Ragu

What does this alarm mean ....... hwStringMatch - HP Insight Management Agents Trap Alarm: Logical Drive Status Change: Slot 1, Drive: 2 ......... Status is now Predictive Failure

Hi,
I have received this trap from the Call Manager PUB server running version 7.1.5.31900-3
hwStringMatch - cmaidad[5579]: Physical Drive Status Change: Slot 1 Port 2l Box 1 Bay 1. Status is now Predictive Failure
I have checked the drive status via CLI and all drives show OK, both physical & logical
Is there anywhere you can check what is causing this event and is it merely advising of a potential drive failure

Hi
Modern drives have embedded monitoring. Whilst the disk hasn't failed, something internally is telling the embedded monitoring that it may soon fail - it's running a little hot, having excessive write errors, latency is drifting up... something subtle is going wrong.
It could be caused by a firmware error... but I'd take it at face value.
It might have failed by the time you read this, or it might work fine for another 20 years.
Either way - when I was a server admin I would get any disk with a predictive failure swapped out immediately. No point waiting for it to fail - even on a RAID system when a disk fails although you don't lose data you have your trousers down as a coincidental second failure would ruin your day!
Regards
Aaron

Logging CRS configuration changes

Hallo,
in a 10.1 RAC environment,
is there a file which logs CRS configuration changes, like issuing a oifcfg -setif command?
Thx

Yes

Anyone Seen this Message Before "Configuration changes for domain saved to the repository."

I'm running into this situation where one of my WLS servers is generating the following
messages "Configuration changes for domain saved to the repository." This process
of saving to a repository is causing an issue on start-up. Typically my deployments
take 2-3 minutes on start-up. They are now taking 10 minutes. I've made no changes
to my application. I've been able to identify that this process of saving to a
repository is the main issue of contention....
Anyone know what the message means? Anyone know how to disable this message?

This is just WebLogic writing back changes to config.xml, which it does from time
to time for reasons like:
- your app deployment has changed.
- you've reconfigured something in the console.
etc...
WebLogic just spins this off into a handy execute thread, so it would be surprising
if this was causing your app deployment to slow down (how do you know it is).
In my experience, slower than normal app deployments are usually down to:
- waiting for database connections.
- waiting for connecitons to other external resources.
Remember (in WLS6.x anyway) initialisation is done serially on the main thread,
so if something's slow, everything gets blocked behind it.
simon.
I'm running into this situation where one of my WLS servers is generatingthe following
messages "Configuration changes for domain saved to the repository."This process
of saving to a repository is causing an issue on start-up. Typicallymy deployments
take 2-3 minutes on start-up. They are now taking 10 minutes. I'vemade no changes
to my application. I've been able to identify that this process ofsaving to a
repository is the main issue of contention....
Anyone know what the message means? Anyone know how to disable thismessage?

How to prevent BGP code 6 (Cease) subcode 6 (Other Configuration Change)

Can anyone tell How to prevent BGP code 6 (Cease) subcode 6 (Other Configuration Change) ?
We are facing frequent problem with this error. Please suggest how to stop this....
Note :- We are using BGP VPN between this peers.
Logs :
Date/Time : 2015-04-30 00:49:40+05:30
State : Up
Date/Time : 2015-04-30 00:39:05+05:30
State : Down
Error Code : 6(CEASE)
Error Subcode : 6(Other Configuration Change)
Notification : Send Notification
Date/Time : 2015-04-29 18:22:11+05:30
State : Up
Date/Time : 2015-04-29 18:21:39+05:30
State : Down
Error Code : 6(CEASE)
Error Subcode : 6(Other Configuration Change)
Notification : Send Notification

on the same dates you mean the same request are posted in IT2001? ie both full days?
Please clarify
usually the Time collision checks are followed only via posting using report rptarqpost and not while applying through portal in ESS
This is very strange you indicate
SO you need to check the basic tables first
You may need to check the collision.
Collisions Tables V_T554Y and V_554Y_B reaction indicators.
and V_T508A
able T582A set to time constraint of "Z
In backend Pa30 collision works like this
1) the logical collision, checks if there is an overlap in the validity
interval of the IT´s (begda, endda).
2) the physical collision, checks if there is an overlap in the time
interval of the IT's.
In the logical collision it is checked if there is an overlap in the
validity interval if at least one of the records is a full-day
( that is the case when you enter a Daily Work Schedule (DWS) )
So when one of the records has a DWS it is considered to be a full day
record and the logical collision is taken into consideration.
If instead you enter the only the time interval manually the records
are considered to be partial-day and the physical collision is
performed. In that case only the time interval is important.
So if the clock times are not entered the physical collision can not
take place.
The collision functionality is always based on clock times and dates,
never on the total nr of hours.
Edited by: Siddharth Rajora on Sep 21, 2011 4:57 PM

X121e bios loop : "configuration changed - restart the system"

After changing some settings in BIOS i got stuck in a reboot - loop.
* Cannot access the BIOS any more - pressing F1 changes the message to "Entering BIOS Setup Utility" followed by the message "configuration changed - restart the system"
* F12 changes the message to "Preparing Boot Device List" followed by "configuration changed - restart the system" and the system reboots again.
* Tried to remove the battery, pressing the power button for 10-15 sec. and reboot with AC Adapter connected
* Tried to remove the battery and unplug the bios battery for 3 days the reset the bios - doesn't work
* Tried to boot via USB (BIOS update, FreeDOS with BIOS update, Ubuntu-Live-USB) - nothing worked .. didn't change the boot-order - i always prefer USB boot
* Removing hard-disk produces the message "no operating system found"
Are there any tricks for resetting the BIOS to defaults, flashing BIOS without booting from USB?
see
* http://forums.lenovo.com/t5/ThinkPad-Edge-S-series/E-325-bios-settings-changed-keeps-rebooting/td-p/...
* http://forums.lenovo.com/t5/X-Serie-ThinkPad-Notebooks-inkl/x121e-Configuration-changed-Restart-Syst...
- there are several people with this issue ...

In service center they said that motherboard is glitchy and needs replacement.
So it was a hardware fault.

How to set up 'Tansport Request' to move Configuration Change to Prod ?

I would like to know the steps to transport the Configuration Changes from Development to QA (or Production).
Thanks for your help.

Hi Oscar,
Request are of two types.
1.Customization Request.( functional Consultants)
2.Workbench Request( Abapers)
If you are doing any configuration change using you user id in Devlopment system.
1.while saving the changes it will ask for customizing Request, here you have to give the request and save the changes.
if you want to move the changes from Development System to Qualtity.
Goto Transaction SE09 or Se10 give your user id name then Click on Display
Here Go to your Request No.xxxxxxxx and Click the Tranfort Icon/Bus Icon or Press F9.then the changes will be moved to Quality System.
Please ensure that Task will be released first.
Hope this clarifies your doubts and Please Reward If Really Helpful,
Thanks and Regards,
Sateesh.Kandula

How to avoid changes in Inactive pernr master data

Hi Expert,
I want to know the best option to avoid the changes in Separated employees master record. Client requirement is to freeze the separated employee History data related to PA, OM,Time, PMS.
can be do it level wise or Period wise?
Thanks,
Akhilesh

Dear Sandeep,
Your suggestion will work if Payroll is in process, in my case one of my client subsidiary having no payroll process in the system.
Client having PA,OM,Training & Event Mgmt. PMS, Time Mgmt. Process in SAP but not Payroll.
Payroll locking is not working as control record not maintained due to No payroll process in System.
there are huge data based of employee master with inactive status & requirement is to restrict the changes in inactive employees data.
can we do it ?
Thanks,
Akhilesh

Making a configuration change without using admin console

I am using the Platform Edition of App Server 7 so I don't have access to the web-based admin console.
I need to make a configuration change and the only directions I have are for the admin console.
Can anybody give me some pointers on what file to edit to acomplish the procedure below?
8. Log in to the Sun ONE Application Server administration console.
9. Select the application server Instance on which you installed the Identity Server.
10. Click JVM Settings and then JVM Options.
11. In the JVM Option field, enter the following string: -Dhttp.keepAlive=false
12. Click Add and then Save.

I think I've found it...
The file is server.xml and it is located at:
/var/opt/SUNWappserver7/domains/domain1/server1/config
There is a section under <java-config> with about 14 lines containing various <jvm-options>
I'll try adding this directive to the end of the <jvm-options> as follows:
<jvm-options>-Dhttp.keepAlive=false</jvm-options>

Configuration changes in long cycle orders

Hi,
We are currently working on with ETO client and have a scenario where Orders are configured using guided selling which triggers multiple child models as required. Each of these child models are connected to each other but can be manufactured and shipped separately. Order life cycle could range from 2 month to one year and changes are quite frequent. We would like to know the best practices we can adopt in configurator change management after booking in such large BOMs?
Thanks
Greg

Hi,
The code looks fine. To check whether the role still gets shutdown or not, you can handle the role's Stopping event, and write some messages to, say, table storage. Then if you see the message in table storage, it means the role has been restarted. Also please
try to write some messages in the Changing event to check whether your event handler is called.
Best Regards,
Ming Xu
We are trying to better understand customer views on social support experience, so your participation in this interview project would be greatly appreciated if you have time. Thanks for helping make community forums a great place.
Click
HERE to participate the survey.

What are configuration changes in billing?

what are configuration changes in billing
regards
[email protected]

hi
mail sent check uour mail
reward if useful
prashanth

AUDIT CONFIGURATION CHANGED : SLOT INACTIVE

Similar Messages

Maybe you are looking for