Audit Log for user

Hi,
Is there a way we can trace the activity or the Transaction Codes accessed by a user? We want to trace on a past date (ie June transactions).
Thank you and best regards.
Rachelle

Hi Rachelle,
You probably posted on a wrong forum. Are you using SAP Business One ? If not, please close your thread.
Thanks,
Gordon

Similar Messages

Audit logs for read operation on tables

I have a requirement of implementing audit logs for tables on read / select operation in addition to insert,update,delete operations. Is there any way to achieve this since triggers are present only for insert,update and delete ?
thanks in advance

Hi,
yes there are many ways you can audit the Source database according to your requirments. as you need to audit the select , insert etc you can audit in many ways
1) By implementing policies , (i.e) FGA , or statement policy on a given table or a given user.
2) you can also do the required task by implementing the alerts on specific conditions like select on a specifc table etc
you can use these utileties from AV console.
Regards.

Audit logs for tables

Dear all,
I have a requirement of implementing audit logs for tables to insert,update,delete operations. Is there any way to achieve this since triggers are present only for insert,update and delete ?
I am using database 9.2.0.3.
thanks in advance.

Hi,
After I turn on audit trail on the database sever and issue DML statment. I have found nothing in the audit table.
1) Set "audit_trial" = true in teh init.ora file
2) Run the $ORACLE_HOME/rdbms/admin/cataudit.sql
3) Connect sys/password by sysdba and issue the following command:
- AUDIT SELECT TABLE, UPDATE TABLE, INSERT TABLE, DELETE TABLE BY APPS BY ACCESS;
Do I need to re-set the database after step 1? or I have made some wrong.
Thanks.

Acs:Delete specific log for user X

Hi Experts
on the acs 5.2 , how to delete specific log for user X, ?
thanks
jamil

Not sure if this answers the question you are asking but the following option is available:
Monitoring Configuration > System Configuration > Collection Filters
Pres "Create" and Syslog Attribute of "User" and set the user name your are interested in
This option prevents records for this user from being collected. It does not remove any records that have already been collected

Audit log for document library

Hi All,
I have a requirement to generate a report for a document library which contains confidential “Policies”
documents, this library exist under sub site. Now my clients wants a log report, which should give information like Who accessed/download/modified document?
Please guide me
MercuryMan

You need to first enable menu audit log reports SharePoint 2010. Please follow the given below steps.
1. Site Action > site settings
2. Site collection features
3.Click on the reporting features
4.Search for the Reporting feature
4.Click on Activate button
Otherwise, you could try automate solution named Lepide Auditor for SharePoint (http://www.lepide.com/lepideauditor/sharepoint.html) which assists to generate report and and provides the
auditing data into real time. It gets real time alerts on detecting changes to users, groups, lists, libraries, folder and permission etc.
Lepide - Simplifying IT Management

Security Audit Log for XI IB

Hello,
on the ABAP Stack it is possible to activate the security audit log, to log activities on certain objects/functions. Is there also a possibilty to do this for the JAVA-Stack.
We have for legal reasons to log, want users are doing on the productive XI system. E.g. we wanna log if someone is changing the value mapping or configurating the adapter.
Regards, Werner

Hi,
chk out these links
Audit Log
http://help.sap.com/saphelp_me21sp2/helpdata/en/23/c9833b3bb1780fe10000000a11402f/content.htm
regards
jithesh

Security audit log for the last 30 days?

Hi,
My current settings for the security audit log is 20 MB (by default). I dont want to control it with file size limitation, but by the no. of days the audit is recorded (max 30 days).
What are the parameters that I would need to maintain?
Or any additinal config is required?
Thanks,
Abdul

Hi,
My current configuration is like this:
Name                Description                                           Current value                                            System default value
FN_AUDIT     Name of security audit file          audit_++++++++
DIR_AUDIT     Directory for security audit files     /usr/sap/GSP/DVEBMGS00/log     /usr/sap/GSP/D00/log
rsau/enable     Enable Security Audit          0
rsau/max_diskspace/local     Maximum space for security audit file     300M     20M
rsau/max_diskspace/per_day     Maximum size of all security audit files per day          0
rsau/max_diskspace/per_file     Maximum size of one single security audit file          0
rsau/selection_slots     Number of selection slots for security audit          2
rsau/user_selection     Defines the user selection method used inside kernel functions          0
I have just activated the audit, and in just 30 minutes, I can see that the file is about 45MB. If this is the growth rate, the 300MB allocated for audit will completely used in just a day.
My requirement is - I want to track users and their activities for the last 30 days (or 45 days). No log should be overwritten unless it is atleast 30 days old.
In SM20, when I give selection from 1.1.10 to 31.1.10, it should show me all the activities during this period, without any breaks.
Other doubts: Do I have to start auditing manually every day? Or will it keep writing logs until it reaches 300 MB which can spread upto multiple days.
Regards
Abdul
Edited by: Abdul Rahim Shaik on Feb 4, 2010 11:17 AM

Failed to save admin audit log for this cmdlet invocation.

HI, I have a co-existence of exchange 2010 and 2013SP1. We are in the process of user mailbox migration from old to new exchange. When we try to configure auditing we get the below message
[PS] C:\Windows\system32>Set-AdminAuditLogConfig -AdminAuditLogEnabled $True
WARNING: The arbitration mailbox 'SystemMailbox{e0dc1c29-89c3-4034-b678-e6c29d823ed9}' for the organization '' is
located on a server that doesn't have Exchange 2013 installed. The arbitration mailbox must be moved to an Exchange
2013 server before you can enable auditing.
WARNING: The command completed successfully but no settings of 'Admin Audit Log Settings' have been modified.
However as per below arbitration and system mailbox are already moved to new exchange.
[PS] C:\Windows\system32>Get-Mailbox -Arbitration | FL Name,DisplayName,ServerName,Database,AdminDisplayVersion
Name                : SystemMailbox{1f05a927-0bf4-475d-b944-392523e3cf54}
DisplayName         : Microsoft Exchange Approval Assistant
ServerName          : auh2mbx02
Database            : EXHDB01
AdminDisplayVersion : Version 15.0 (Build 847.32)
Name                :
SystemMailbox{e0dc1c29-89c3-4034-b678-e6c29d823ed9}
DisplayName         : Microsoft Exchange
ServerName          : auh2mbx02
Database            : EXHDB01
AdminDisplayVersion : Version 15.0 (Build 847.32)
Name                : FederatedEmail.4c1f4d8b-8179-4148-93bf-00a95fa1e042
DisplayName         : Microsoft Exchange Federation Mailbox
ServerName          : auh2mbx02
Database            : EXHDB01
AdminDisplayVersion : Version 15.0 (Build 847.32)
Name                : SystemMailbox{bb558c35-97f1-4cb9-8ff7-d53741dc928c}
DisplayName         : Microsoft Exchange
ServerName          : auh2mbx02
Database            : EXHDB01
AdminDisplayVersion : Version 15.0 (Build 847.32)
Name                : Migration.8f3e7716-2011-43e4-96b1-aba62d229136
DisplayName         : Microsoft Exchange Migration
ServerName          : auh2mbx02
Database            : EXHDB01
AdminDisplayVersion : Version 15.0 (Build 847.32)
How can we fix this??

Try running
setup.exe /PrepareAD /IAcceptExchangeServerLicenseTerms
from the Exchange 2013 distribution again.
If that doesn't fix it, delete the mailbox database and run the setup command again.
Ed Crowley MVP "There are seldom good technological solutions to behavioral problems."

SQLException in the audit log for the Message Display Tool

Hi
I´m newbie in PI Technology, and i have some issues when i try to do the next.
This is the scenario:
I need to communicate two systems, for one side i have SAP, and for the other side i have ADI (legal system) so, i use PI to do this (the communication), PI receive the data from SAP by means abap proxy, until this everything is correct, then i do the mapping of the data and i send a message to ADI (with the SAP XI Runtime Workbench) by means JDBC adapter, if i check the sended message with "Message Display Tool" show that the message was sent (status "Delivered") but if i check the received messages option, in the audit log displays the five next errors:
Error: Could not execute statement for table/stored proc. "FADIA4" (structure "StatementFADIA4") due to java.sql.SQLException: FADIA4 in FILEMET not valid for operation.
Error: JDBC Message processing failed, due to Error processing request in sax parser: Error when executing statement for table/stored proc. 'FADIA4' (structure 'StatementFADIA4'): java.sql.SQLException: FADIA4 in FILEMET not valid for operation.
Error: MP: exception caught with cause com.sap.engine.interfaces.messaging.api.exception.MessagingException: Error processing request in sax parser: Error when executing statement for table/stored proc. 'FADIA4' (structure 'StatementFADIA4'): java.sql.SQLException: FADIA4 in FILEMET not valid for operation.
Error: Adapter Framework caught exception: null
Error: Delivering the message to the application using connection JDBC_http://sap.com/xi/XI/System failed, due to: com.sap.engine.interfaces.messaging.api.exception.MessagingException: Error processing request in sax parser: Error when executing statement for table/stored proc. 'FADIA4' (structure 'StatementFADIA4'): java.sql.SQLException: FADIA4 in FILEMET not valid for operation..
if there are somebody that maybe could know what is the problem?, could the problem be the side of the legal system?, because inside of PI when i do the Test Configuration in the Integration Directory, the end of the test is successful.
Any comment is well received!!
Thanks,
Vicman
P.D. sometimes the error is: java.sql.SQLException: Token ) was not valid. Valid tokens: DAY PATH YEAR LABEL MONTH OPTION RESULT CONNECTION TRANSACTION.
what does it means?

Hi Pooja,
thanks for you quickly response!
XML sended:
<?xml version="1.0" encoding="UTF-8"?>
<ns0:MT_PgDocVentaECC_req xmlns:ns0="http://gmodelo.com/ECC/enviarCobranza">
   <DT_DatosDeControl>
      <MIDDLEWARE_ID/>
      <QUICK_ID/>
      <INTERFACE_NAME/>
      <MESSAGE_ID/>
      <LOG_ID/>
      <USER_ID/>
      <SOURCE_SYSTEM/>
      <TARGET_SYSTEM/>
   </DT_DatosDeControl>
   <DT_PagoDocVentaECC>
      <VKORG>TVKO</VKORG>
      <VKBUR>TVBUR</VKBUR>
      <VKBUR1>TVBUR</VKBUR1>
      <ROUTE>TVRO</ROUTE>
      <ROUTE1>TVRO</ROUTE1>
      <BLART>Q</BLART>
      <BELNR>100</BELNR>
      <WRBTR>200</WRBTR>
      <LFART>100</LFART>
      <VBELN>100</VBELN>
   </DT_PagoDocVentaECC>
</ns0:MT_PgDocVentaECC_req>
this is the XML received:
<?xml version="1.0" encoding="UTF-8"?>
<ns1:MT_PgDocVentaADI_req xmlns:ns1="http://gmodelo.com/ADI/recibirCobranza">
<StatementFADIA7>
<FADIA7action="INSERT">
<Table>FADIA7</Table>
<Access>
<NUMCIA>123</NUMCIA>
<NUMALM>234</NUMALM>
<SUBALM>300</SUBALM>
<CVETOP>16</CVETOP>
<FOLOPV>22</FOLOPV>
<SECOVA></SECOVA>
<IMPOVA>200</IMPOVA>
<ALMOVA>5678</ALMOVA>
<SUBOVA>21</SUBOVA>
<TOPOVA>21</TOPOVA>
<FOPOVA>41</FOPOVA>
<FECOVA>100</FECOVA>
<STSOVA> </STSOVA>
</Access>
</FADIA7></StatementFADIA7>
</ns1:MT_PgDocVentaADI_req>
what do you think about it?, anything wrong?

Unable to get Audit logs for Data Mining Model Oracle11g

Hi All, I followed all the steps given below 2 links but not getting any audit logs.
http://download.oracle.com/docs/cd/B28359_01/datamine.111/b28130/install_odm.htm#DMADM024
http://download.oracle.com/docs/cd/B28359_01/datamine.111/b28130/schemaobjs.htm#sthref233
Made sure the audit_trail is set to DB.
SQL cmds and its output shown below
SQL> AUDIT GRANT,AUDIT,COMMENT,RENAME,SELECT ON mining model NB_SH_Clas_sample;
Audit succeeded.
SQL> COMMENT ON MINING MODEL NB_SH_Clas_sample IS 'i am here';
COMMENT ON MINING MODEL NB_SH_Clas_sample IS 'i am here'
ERROR at line 1:
ORA-03113: end-of-file on communication channel
Process ID: 31648
Session ID: 135 Serial number: 114
SQL> quit
Please help me if i have left out any step
Thanks in Advance

Hi.
Please take a look at the other concurrent thread on model object auditing for more detailed information. If you have Oracle support, please file a TAR with Metalink (http://metalink.oracle.com).
Regards, Peter.

Audit Logs for Administrators

Hello
How can we audit the Site Administrators or Farm admins when changing site Settings or enabling Features on the web applications or Site Collection level? the Site Collection Audit Logs Does Not
Yasser

Hi,
There isn’t anything like site collection auditing for administrative events like feature activations etc. This info will however be in the ULS if the logging level is set high enough. Obviously there are downsides of a high logging level - lots
of noise in the logs, logging location will get filled up quickly.
Cheers
Matt

Audit Log for HRP Infotypes

Hi,
Just like PCL4 for PA Infotypes, do we have a mechanism to check the changes done to HRP Infotypes?
Thanks,
Suryakiran

Pl check this <a href="http://help.sap.com/saphelp_erp2005vp/helpdata/en/db/7a2a40ce93185de10000000a1550b0/frameset.htm">SAP Help</a> on maintaining log for PD infotypes..
~Suresh

Error in Releasing Contracts in SRM-Error Log for user WF-BATCH

Hi,
When we are releasing contracts in SRM, an error log is being generated for a user WF-BATCH with message :
"Recipient not found
The error ocurred by processing event RELEASED_NEWLY with GUID 4530EA86C23B007700000000B0000023 and object_id= 4400000238"(Where 4400000238 is our contract no)
Also our contract is not being transported to CCM even though all the relevant configurations have been done in XI.
Is this because of the error log?? What is the issue??
Any Useful answers would be suitably rewarded..
Regards,
Puneet

Hello Puneet,
Please check whether u have released that contract or not.
if u need to release purchase order from the contract, it needs to be released first.
from ur problme statement, it seems u haven't released that contract.
Sarabjeet

Audit log files user rights

Hello,
I started binary audit some of my servers. It works fine.
Generated files has 600 mask and root:root group:user. This makes my backup routines sick. Backup scripts work as another user and permission denied errors arises.
How can i change audit files mask?
Thanks,
Osman

Although I'm not sure I don't think you can since audit data will always need solid protection due to the included information. The only liable option I see is to use syslog as your logging daemon.

Parse Security Logs for User Account logon Computer Name

Greetings,
I was recently tasked with creating a list of user accounts and the computer in which they logged onto. Unfortunately, we do not have time to use the logon script method. I believe we can achieve this goal using software similar to LANSweeper
however not all computers will be turned on at a given time and I believe this application gathers it's information from the client PC. One possible solution I see is parsing the data from our domain controllers Security Logs / Successful Logons however
this is proving to be a challenge. Any suggestions?
Thanks,
Chris

Hi Chris,
I was recently tasked with creating a list of user accounts and the computer in which they logged onto.
I believe we can achieve this goal using software.
There is no built-in tool to complete this task.
However, we can configure event log trigger to send email when specific logon events are generated.
Here are some related articles below for you:
Getting event log contents by email on an event log trigger
http://blogs.technet.com/b/jhoward/archive/2010/06/16/getting-event-log-contents-by-email-on-an-event-log-trigger.aspx
Send an email when an event is logged
http://blogs.iis.net/rickbarber/archive/2012/10/26/send-an-email-when-an-event-is-logged.aspx
Best Regards,
Amy
Please remember to mark the replies as answers if they help and un-mark them if they provide no help. If you have feedback for TechNet Subscriber Support, contact [email protected]

Audit Log for user

Similar Messages

Maybe you are looking for