Fire Fighter job /VIRSA/ZVFATBAK is finishing in zero sec

Hello Everyone,
In my Solution Manager Production system FF job /VIRSA/ZVFATBAK is finishing in zero sec.
Log:
Date       Time     Message text                                                                        Message class Message no. Message type
01.04.2014 02:30:33 Job started                                                                              00           516          S
01.04.2014 02:30:33 Step 001 started (program /VIRSA/ZVFATBAK, variant &0000000000002, user ID DE15386)      00           550          S
01.04.2014 02:30:33 Job finished                                                                             00           517          S
Please suggest what could be thepossible reason.
I am not able to get FF logs. So is this job the reason for no logs?
Thanks,
Ashish Gaurav

Hi Tang,
Did you check the configuration settings for both the FF IDs.
Also, as a trail and error, to isolate the issue, can you check using only the 2nd FF ID for which the log was not sent. Ensure that the 1st FF ID is not used. This way you can identify whether the issue is with the FF ID or the configuration.
Regards,
Raghu

Similar Messages

Fire Fighter in Virsa

Can someone please describe me how fire fighter works
Thanks

The only actions that are recorded are those of the firefighter ID. The firefighter ID does not record any other actions for any other users.
A good example of what a fire fighter ID could be used for is Basis access. There are additonal tasks that a Basis person is allowed to perform in a non-Production system versus a Production system (as I am sure you are aware). There are times though that he/she may need elevated access to perform a critical task. At that point the firefighter ID is accessed and their actions recorded.
As far as the type of access that you would assign, keeping with the same Basis person example, take a look at what you have defined for your Basis person(s) in your Production environment. Compare that access to what he/she has in QA (and/or Dev). The delta identified is the elevated access that may be required as baseline authorization for the firefighter ID. Of course this is only an example and you would have to tailor it to suite your requirements.
Documents emailed.

Log storage time of /VIRSA/ZVFATBAK

Hi Guys,
Can any one let me know how many days firefighter stores the logs generated by the background job /VIRSA/ZVFATBAK.
I have given the user Firefighter ID from june 12th to june 19th. can I generate a firefighter log on june 28th.
Kindly respond.

Hello Rahul,
The Data which is retrieved by the /VIRSA/ZVFATBAK program is stored in Firefighter tables. If the problem was able to retrieve the data for that particular date successfully from SAP System then it will be available in the logs for review as long as it is in Firefighter tables.
Regards, Varun

Fire Fighter Logs details in /n/virsa/vfat

Hi,
When i see the Fire Fighter logs through the Tcode /n/virsa/vfat, i am just able to know what tcode was used by a particular user and at what time and date.
Now if he has used SE38, i do not get the information of what report or program did he run in SE38. Similarly for SE16n I will not have the information of what table was used and modified.
So is it possible to know the complete details of the activity that user has done throught the FIreFighter.
Please help.
Regards
Anubhav

In the case of SE16 you can see the generated selection-screen program for that table being submitted both in STAD if you are fast enough (i.e. before the aggregation takes place) and in the security audit log (SM20N - which is actually the correct tool to rely on). They will show reports from SA38 etc as well.
However SE16N does not generate and submit report type programs so you cannot know which table was accessed. The only little "skidmark" it will leave behind is the memory id entries of the tabname selection parameter and SQL performance traces, but GRC does not access this data and it is unreasonable to assume that the history of these memory ids has been activated on the server side.
If worst comes worse you will be able to find out the table though - latest with a thumb-screw or bamboo under the finder nails...
Cheers,
Julius

/virsa/ZVFATBAK background job

Hello,
SAP 4.6c.
/virsa/ZVFATBAK is running currently in the system at specific periods.
Should this job be running on each application server of the system?
Or just a one time schedule in SM36 for the entire system is good.
Kindly advise.
Thanks.
Prasanna

Hello,
Thanks for the reply.
Recently, the frequency of the job was switched from hourly to once every 4 hours.
The firefighter logs are not getting generated.
I dont see anyother changes that have been made.
1039144-Is this note the solution?
thanks.
Prasanna

Job cycle for Prog. /VIRSA/ZVFATBAK for GRC

Hi Experts,
I want to know JOB cycle for Prog. /VIRSA/ZVFATBAK for GRC.
Please advice the matter.
Regards,
Gaito

Hi,
This job scheduled every hour.
Check SAP Note 1039144 - Superuser job is not completing or is not retrieving data
Thanks
Sunny

/VIRSA/ZVFATBAK stopped after upgrade

Hi,
We are currently running the GRC compliance report to view log of Fire-fighter users and the transactions they have been using. This report is sent out to the FF owners every month.
We upgraded our system from 4.7c to ECC6 in early May and since then the /VIRSA/ZVFATBAK job has not been running and collecting the log data.
The /VIRSA/ZVFATBAK is now setup correctly again but we were hoping to run the job so it would collect the data from the previous month, up to the 9th of June.
I have been trying various techniques and selection parameters but have been unsuccessful.
Can anyone tell me any way of running the /VIRSA/ZVFATBAK job so that when I run report next week it will have all the data as far back as the 9th of June?
Any help is much appreciated,
Colm

Hi Michael,
Thanks for the reply. I will talk to the basis team about this but I probably should mention that on Thursday evening I was able to run the job for the 6th and 5th of July successfully. I had to go to a meeting then and when I came in on Friday morning the job was no longer working.
I wonder is it something to do with my selection screen?
If I want to gather all the data for the 2nd of July I am running it with a Start Date of 02.07.2010, a start time of 23:59:59 and a read time of 23:59:58.
As I said this worked for the 5th and the 6th but no longer works for me and there were FF enteries on the 2nd.
Many Thanks,
Colm

ABAP report /VIRSA/ZVFATBAK run very long on backend

Hello experts,
For ABAP report /VIRSA/ZVFATBAK which runs in the backend system, normally how long would it take to finish? Because now the duration for the report is already 2k++ seconds and its still running in our test system, while the report scheduled in our development system only uses 1 or 2 secs to finish.
Any idea why is it taking that long in a test system?
Appreciate the replies, thank you in advance.

Thank you for the note sabita! Its really helpful.
One question regarding the sapnote, it mentioned STAT collector job, is this a standard job?
If yes, below are the standard collector jobs which is scheduled in the system, which would it be?
SAP_COLLECTOR_FOR_JOBSTATISTIC
SAP_COLLECTOR_FOR_NONE_R3_STAT
SAP_COLLECTOR_FOR_PERFMONITOR

Fire Fighter is missed in the FF log sent to controllers

Dear Experts,
We are at SP10, and using role based Fire Fighter.
We defined a FF role (e.g. FFrole001) and assigned this role to fire fighters.
We are facing the following problem:
If two fire fighters do the FF job at the same time, only one of fire fighters activity log will be sent to controllers for review.
(Please note that the activity log of both fire fighters has been captured, we can find it in the /n/virsa/vfat.)
Here is the detailed steps:
1. The FF roles were assigned to two Fire Fighter at the same time
2. Both of the Fire Fighters had performed some activities in system.
3. FF activity log report captured the activities performed by the two Fire Fighters.
4. But in the attachment in the email which was sent to FF controller, only one Fie Fighter was shown.
Much appriciate if any one can help on this.
Thanks!

Hi Tang,
Did you check the configuration settings for both the FF IDs.
Also, as a trail and error, to isolate the issue, can you check using only the 2nd FF ID for which the log was not sent. Ensure that the 1st FF ID is not used. This way you can identify whether the issue is with the FF ID or the configuration.
Regards,
Raghu

Fire Fighter Mail Notification

Hi Gurus,
I have an issue with fire fighter....if i am not wrong...When i add a firefighter id to a user id ...it should send a mail...Fore Fighter controller and owner with a link to approve and then they approve the access...then it will send the user access to the user.The above process is not happening with the fire fighter we using..
The fire fighter owner and controller are just getting the logs...Please let me know how to config the initial mail notification.
Thanks in advance
Guru

Hello Guru,
When a user probably a Security Administrator assigns Firefighter ID to a Firefighter User there is no such provision of automated e-mail notification in Access Controls 5.2 - Firefighter SP level 5 with Patch 1. Which is at the moment latest available on SAP service market place.
But you can take it another way. If you have an Honour of using Access Enforcer then you can create a dedicated workflow for Firefighter ID assignment. Where you can define different stages and approvers for all scenarios. Also this way you can intimate the requestor and approver about the status.
In role expert, you can automate the default Virsa Firefighter, Owner, Administrator and controller roles for users.
Still there is no such automated functionality which can let you automatically add users to Virsa Firefighter configuration tables and send an e-mail.
What you can do is, after the approval of the firefighterID assignment your security guy can manually add users to these considered tables and finish the AE workflow notifying all the approvers and requestor.
I hope i touched the whole scenario.
If you still have doubts, let me know.
Thanks & Regards,
Amol Bharti

Fire Fighter Report

Hello Experts,
I think I need some help on the Fire Fighter Reports.
My ultimate goal is to get the list of Reason and activity used by the users during the months of January2012 and December2011.
I was trying to execute the report "Reason/Activity Report" in SPM Tool Box in the transaction /n/virsa/vfat by giving the date range 01.01.2012 to 31.01.2012, i get the list but the column Reason Code is empty.
I tried to view the table /virsa/ffreact in SE16.
If i give input for FFKEY as 201112(December 2011), the result is "no table entries found for the specified key". But in the FF log report i can see users logged in during that period. Its the same case for the input *201201(January 2012).
But if i give the input as 201202(February 2012), i get the list.
Can anyone tell me the reason behind this.
Best Rgds,
Jaravuy

Hi Jaravuy,
Did you try to update the log?
/n/virsa/vfat
-->log information (F5)
-->update (shift+F1)
--> Choose a period where you are sure there has been activity
Once you do this, you can try again.
Best regards,
Félix

BCD_OVERFLOW CX_SY_CONVERSION_OVERFLOW /VIRSA/ZVFATBAK

Hi guys,
I have my FF user executing transaction SE38 and upon the execution, the background job /VIRSA/VFATBAK ended in status "Canceled". In the log, its shows the below description for the background job cancallation.
Short text
Overflow during an arithmetic operation (type P) in program "/VIRSA/ZVFATBAK".
What happened?
Error in the ABAP Application Program.
The current ABAP program "/VIRSA/ZVFATBAK" had to be terminated because it has come across a statement that unfortunately cannot be executed. A value is too long for a calculation field.
Error analysis
An exception occurred that is explained in detail below.
The exception, which is assigned to class 'CX_SY_CONVERSION_OVERFLOW', was not caught in
procedure "GET_SE38_CHANGES" "(FORM)", nor was it propagated by a RAISING clause.
Since the caller of the procedure could not have anticipated that the exception would occur, the current program is terminated. The reason for the exception is:
In the current arithmetic operation with operands of type P an overflow has been detected. Possible causes are:
1. The result field of type P is too small to store the result.
2. The result or an intermediate result has more than 31 decimal places.
How to correct the error
Maybe the result field - if still possible - must be defined larger.
Maybe the current process can be divided into separate units in a way that only smaller values occur.
Anyone shares this experience before and if you have resolve it via the proposed way to coorect the error?
If you have successfully executed the corrections, can you pls share on the steps to be taken?
Thanks.
Raymond

An calculation causes an exception because the result variable is too short to store the result.
You can 2 things to solve the problem :
- Add an error handling mechanisme CATCH or TRY to get the exception and act on it (message or something else)
- change the result variable so that it can store the resulting value
regards,
hans

Run VIRSA/ZVFATBAK to generate missed log

Hello experts, we had an upgrade a couple weeks ago and we had to put the VIRSA/ZVFATBAK job on hold. Because of this we have a couple of FF logons missing data. We have the "BACKGROUND JOB WAS NOT SCHEDULED/LOG & FILE NOT YET GENERATED" error. Usually I can run job immediately after the upgrade and gather this missed data, however this time we forgot and now trying to go back 3 weeks ago.
I thought since I can still see the data in STAD (ST03) I should be able to get VIRSA/ZVFATBAK to run and find the data. This is not the case this time. Can anyone confirm its too late to generate these missed logs?
Thanks
Dave Wood

Hi David,
If you see that logs are missing for certain date and time then you can run the report /VIRSA/ZVFATBAK with date and time for which logs where missing, see sap note - 1142312 (read this to understand what start & read time should be given to run the report)
Please be informed that the report will fetch data from STAT and CDHDR, CDPOS only if the data exists in these for the given date and time. If the data has been purged from STAT for that period then its not possible to get the logs.
Also note this point - As per design, manual FF log update considers only the firefighter ids
assigned to the user who is triggering the update through the firefighter dashboard. Whereas the scheduled background job considers all the FFIDs for a particular time period.
Best Regards,
Sirish Gullapalli.

Fire FIghter Log Issue

Hi Gurus,
I have an issue with Fire fighter Log Job...I have Scheduled the Job...ZFATBAK with a period One hour....
When i tried to look at the Log in Fire Fighter tool...It has the below message...
BACKGROUND JOB WAS NOT SCHEDULED/LOG & FILE NOT YET GENERATED.
Please help ...

Hi,
Guess I try to help you here. Can you please check the following;
1.FATBAK job ? ( Via SM37)
2. Go to the configuration table in the FF (Logon to FF and one of the tabs--)
Please let meknw the what you see.
Thanks

Ending a Session of a Fire Fighter ID

Hi,
One of my user has used the fire fighter yesterday and logged off.
Now if he logs in to fire fighter using /n/virsa/vfat, the fire fighter id still shows that its being used by the same user ID.
I have checked SM04 to end the users session.
I can see the user ID logged in, but i cannot see the Fire Fighter ID in SM04.
I clicked on the user ID and then clicked on the sessions, to find the transactions to end. But the transaction /n/virsa/vfat is not there.
Then i tried in AL08 and it shows that the fire fighter ID is still active.
And also there are not logs in SM12 for both user ID's
But how can i end the fire fighter ID's session now.
Best Rgds,
jaravuy
Edited by: jaravuy on Feb 17, 2012 3:09 PM

I can see the user ID logged in, but i cannot see the Fire Fighter ID in SM04.
Then i tried in AL08 and it shows that the fire fighter ID is still active.
SM04 will show the list of users in the application server you are logged in. Check the application server in AL08 where the user is logged in. Then in SM51 you change your application server. Then in SM04 you will find the FF user. Here you need to kick off this user.
Regards,
Arpan Paik

Fire Fighter job /VIRSA/ZVFATBAK is finishing in zero sec

Similar Messages

Maybe you are looking for