How to Audit log T000 table

Hi all,
We have got one requirement from security team to check the possibulity of sending automatic emails alerts when some body open the system thru SCC4 , means we need to activate the change logs on T000 table and send email to security team when somebody opens the system.
Change logs activation is fine but need help on how to send automatic emails when scc4 is opened..
Please suggest ..
Thanks,
Subhash.G

we created an SQL script at Os level and whenever status changes in tables:
TADIR for SE06
T000 for SC4
I cannot supply that script, but you get the idea.

Similar Messages

Audit logs for tables

Dear all,
I have a requirement of implementing audit logs for tables to insert,update,delete operations. Is there any way to achieve this since triggers are present only for insert,update and delete ?
I am using database 9.2.0.3.
thanks in advance.

Hi,
After I turn on audit trail on the database sever and issue DML statment. I have found nothing in the audit table.
1) Set "audit_trial" = true in teh init.ora file
2) Run the $ORACLE_HOME/rdbms/admin/cataudit.sql
3) Connect sys/password by sysdba and issue the following command:
- AUDIT SELECT TABLE, UPDATE TABLE, INSERT TABLE, DELETE TABLE BY APPS BY ACCESS;
Do I need to re-set the database after step 1? or I have made some wrong.
Thanks.

Audit log AUD$ table and Query...

We have enabled auditing for DB user ERP, 'DB, EXTENDED', we restored our ERP schema day before yesterday, and today When I checked the log file, its size is 4.3GB, before that the file size was 60 MB.
When I queried to check the total rows with sysdate-1, there are 66,60,756 rows, before the ERP schema restoration there were around 30,000 rows.
I have not changed the query.
The AUD$ table size is increasing rapidly, its size has become over 10GB in two days.
PLease help me... what should I do?
Regards,
Rakesh Soni,
http://rakeshocp.blogspot.com/

Purging an AUD$ table is good idea after taking the export....
Yeah...that could be better idea to audit those things that application skips...
I was just getting calls from finance and operations departments... complaining that their ERP applications were haning taking long time to execute day end procedures and in reports...around 20 to 30 minutes.... as I recalled that my last deployment on live was enabling of auditing as I executed noaudit all and noaudit select, update, delete, insert on erp, The user got their day end procedures executed and report in less than 1 minute...
Can anybody explain me....Does auditing degrades performance..?
Regards?

Audit logs for read operation on tables

I have a requirement of implementing audit logs for tables on read / select operation in addition to insert,update,delete operations. Is there any way to achieve this since triggers are present only for insert,update and delete ?
thanks in advance

Hi,
yes there are many ways you can audit the Source database according to your requirments. as you need to audit the select , insert etc you can audit in many ways
1) By implementing policies , (i.e) FGA , or statement policy on a given table or a given user.
2) you can also do the required task by implementing the alerts on specific conditions like select on a specifc table etc
you can use these utileties from AV console.
Regards.

Audit a Specific Table

Hi all, I am using Oracle 10gR2 on solaris.
Can some one direct to to any document to tell me how can I audit a specific table? I went through this doc http://download-uk.oracle.com/docs/cd/B19306_01/network.102/b14266/cfgaudit.htm but it doesn't say how to audit a SPECIFIC table.
Regards.....

Please read paragraph 12.4.3.3 in the document you posted.
Sybrand Bakker
Senior Oracle DBA

Active Table Logging T000 performance impact

Hi fellow SAP experts,
I need some advice on system performance impact when switching on Table Logging for T000 - configuration in production please?
We have decided to turn on Table Logging for auditing purposes, only allowing developer config in production following a volume of evidence being supplied.
I need to know how much this activation is going to impact the performance of the companies production environments, how much storage, memory, performance, etc. this function is going to consume and how much of the above consumables I need to cater for now and in the future?
We have a Dual Track environment, BAU want to switch on Table Logging for fix on fail, I want to swich it on for Project deliveries.
Please advise, with referencing if possible?
Thank you kindly
Paul

Hi Paul,
There has been a constant debate whether table logging affects the System performance, especially in Produciton environment. Please see my comments below :
1) To turn on logging for table T000, you will have to activate the parameter rec/client, with values for one client or all the clients in the System depending on your requirement.
2) This parameter setting will not only log changes to T000, but also for over 28000 tables.
3) But these are customizing tables which usually contain a relatively small amount of data which is changed occasionally.
4) After activating, if you suddenly find performance issues, you can check which tables are causing issues via transaction SCU3.
5) You can go to transaction SE13 and deactivate logging for a table, if you find too many entries for any particular table in SCU3.
So, logging tables doesn't necessarily impact performance. Hope this helps. Please refer to SAP Note-608835 related to this.
Best Regards,
Savitha

How to fetch audit log in ABAP

can somebody tell me how to fetch audit log texts in abap program to displyay.
if Any functional module present to retrieve could you pls tell me..
ambichan

hi,
use the function module read_text to retreive the text details.
FUNCTION READ_TEXT.
""Lokale Schnittstelle:
*"       IMPORTING
*"             VALUE(CLIENT) LIKE SY-MANDT DEFAULT SY-MANDT
*"             VALUE(ID) LIKE THEAD-TDID
*"             VALUE(LANGUAGE) LIKE THEAD-TDSPRAS
*"             VALUE(NAME) LIKE THEAD-TDNAME
*"             VALUE(OBJECT) LIKE THEAD-TDOBJECT
*"             VALUE(ARCHIVE_HANDLE) LIKE SY-TABIX DEFAULT 0
*"             VALUE(LOCAL_CAT) DEFAULT SPACE
*"       EXPORTING
*"             VALUE(HEADER) LIKE THEAD STRUCTURE THEAD
*"       TABLES
*"              LINES STRUCTURE TLINE
*"       EXCEPTIONS
*"              ID
*"              LANGUAGE
*"              NAME
*"              NOT_FOUND
*"              OBJECT
*"              REFERENCE_CHECK
*"              WRONG_ACCESS_TO_ARCHIVE
specify the name of the text and the object type as specifed in THEAD table.
Regards,
Jagath

How to extract audit log from R/3 into BW

Hi, I have a request that how to extract audit log from r/3 into bw?
Is there any datasource or infocube I can use?

HI ,
Identify your Audit Log table and create generic data source for the same using rso2.
Regards
BVR

Problem with the XI-Audit log entries in the table "XI_AF_MSG_AUDIT"

Hi,
I have an async-szenarios for PO:
We send Idoc's from SAP ERP to a WebService via SOAP. And we take Ack's. We use Integrationsprocess with deadline block to catche the errors after the retrying (three times) and to send they via e-mail.
Our problem is, the number of the audit logs in the table "XI_AF_MSG_AUDIT":
In the RTW only we see one audit log (with three retries) in an error case. But in the table XI_AF_MSG_AUDIT there are about 76 entries for the same audit log in the error case and about 20 entries in the case of the succuessfull processing.
This number of the entries in the table causes problem with the size of the redo log file and delete job of cours the large size of the table and therefore problem on the data base. The table can not be controlled. The delete job can not run and cancels every time due this redo log problems
What can cause that?
How can it be prevented, that so much entries are not be made in the table "XI_AF_MSG_AUDIT".
Best regards
Gueltekin

Hi Gueltekin,
I am only aware of the general property auditLogEnabled of J2EE Engine Service SAP XI AF Core, which controls in general (default = true) that entries in the AF Message Audit log are written at all.
(see [http://help.sap.com/saphelp_nw70/helpdata/en/5c/22ee41c334c717e10000000a155106/frameset.htm|http://help.sap.com/saphelp_nw70/helpdata/en/5c/22ee41c334c717e10000000a155106/frameset.htm])
I assume that your scenarios in the error case is sending up to three messages and for each message the number of audit log infos are created. You might want to check the detailed entries in the log and see from where they are comming, you might use customer modules etc. as well.
Best regards,
Silvia

How may I include the table for audit?

How may I include global tables for audit? We are going to control changes.
Do you know which table contained the list with it?
Thanks

Hi Marina,
The following is the information on table log:
You must start the SAP system with the rec/client parameter. This parameter specifies whether the SAP system logs changes to table data in all clients or only in specific clients. The parameter can have
the following values:
- rec/client = ALL logs all clients
- rec/client = 000 [,...] logs the specified clients
- rec/client = OFF turns logging off
In the technical settings (use transaction SE13), set the Log data changes flag for those tables that you want to have logged.
If both of these conditions are met, the database logs table changes in the DBTABPRT table. You can also check at transaction SCU3.
Use the RSTBHIST report to obtain a list of those tables that are currently set to be logged.
Hope it helps.
Please award points if it is useful.
Thakns & Regards,
Santosh

Audit log of customized table.

Dear experts,
I need to trace log of some tables.
In spro transacction there is one customize transacction KEDE. This transacction is used to define derivation rules and generates entries with tables names. This records are generated in TKEDRS table. I do not need to audit this table. I need to audit some the tables recorded in field table of table TKEDRS.
K9XXXYYYNNNN.
XXX- ID SYSTEM
YYY- ID CLIENT
NNNN-Number
This custom point generates tables in dictionary. I need to trace this tables for audit log of changes. One solucion is configure SCU3 and tables in SE11.
This table do not have modification digalog. (cdhdr, cdpos, ... ) tables.
Are there other solution?
Thanks and regards.
David Sánchez.

Dear experts,
I need to trace log of some tables.
In spro transacction there is one customize transacction KEDE. This transacction is used to define derivation rules and generates entries with tables names. This records are generated in TKEDRS table. I do not need to audit this table. I need to audit some the tables recorded in field table of table TKEDRS.
K9XXXYYYNNNN.
XXX- ID SYSTEM
YYY- ID CLIENT
NNNN-Number
This custom point generates tables in dictionary. I need to trace this tables for audit log of changes. One solucion is configure SCU3 and tables in SE11.
This table do not have modification digalog. (cdhdr, cdpos, ... ) tables.
Are there other solution?
Thanks and regards.
David Sánchez.

How change sStart and End Date and time in the Audit log ???

Install C2S BM39SP1. Work.
Go to the: https://bmserver:8009
Open : VPN Monitor | Audit log information.
Problem - can not cahnge Date and time in the Audit Log Start(End)
How i vcan do this ?
How i can get every day stat log:
login ; date_time_login ; dtae_timie_logout ; bite_in ; bite_out
Serg

Serg,
It appears that in the past few days you have not received a response to your
posting. That concerns us, and has triggered this automated reply.
Has your problem been resolved? If not, you might try one of the following options:
- Visit http://support.novell.com and search the knowledgebase and/or check all
the other self support options and support programs available.
- You could also try posting your message again. Make sure it is posted in the
correct newsgroup. (http://support.novell.com/forums)
Be sure to read the forum FAQ about what to expect in the way of responses:
http://support.novell.com/forums/faq_general.html
If this is a reply to a duplicate posting, please ignore and accept our apologies
and rest assured we will issue a stern reprimand to our posting bot.
Good luck!
Your Novell Product Support Forums Team
http://support.novell.com/forums/

How to enable the Exchange 2010 Admin Audit logs in Event Viewer

How to enable the Exchange 2010 Admin Audit(Mailbox Auditing) logs in Event Viewer.
- Sivashankar. Please mark as answer/useful if my contribution is helpful

Hi Siva,
We could execute the command below to view Administrator Audit Logging settings:
Get-AdminAuditLogConfig
If it is not enabled, please run the command below:
Set-AdminAuditLogConfig -AdminAuditLogEnabled $True
In addition, here are some references for you to utilize this feature:
Configure Administrator Audit Logging :
http://technet.microsoft.com/en-us/library/dd335109(v=exchg.141).aspx
Search the Administrator Audit Log :
http://technet.microsoft.com/en-us/library/ff459262(v=exchg.141).aspx
Regards,
Rebecca Tu
TechNet Community Support

Audit Log - Table Log

Hi everyone,
Can anyone tell me if i activate table logging on a table (not customizing table) like MARC table, what information is saved in the system?.
Can I check or know, previous the audit log activation over this table, what fields or what information is recorded?
thanks,
HEPC

This is table logging for customizing type entries in not necessarily what you are looking for.
For master data you need to use the application change documents (table CDHDR etc) which is a different concept (I would use that route and protect the object S_ARCHIVE).
What you are actually looking for (and waiting for) is [the package concept at runtime|http://forums.sdn.sap.com/click.jspa?searchID=58483939&messageID=4675719] which developers can already see as warnings. It also means that the package which the table is assigned to must have a complete set of APIs.
I would personally not look for workarounds with performance impacts, but rather clean up the code to make it package concept conform, and then use the application change documents and not the table change records.
This is a better design - more sustainable, less hassles and auditable (via where-used-lists).
My 2 cents,
Julius

How to audit the queries on a table

Hi,
I'd like to keep track of the users that execute a SELECT statement over a particular table in my DB.
My goal here is to know if a table is being queried so I can decide to get rid of it, or to keep it in the DB.
Does anyone knows how to do it?
Thanks,

Set AUDIT_TRAIL=TRUE
once you have done that, than you can enable auditing for some table
SQL> CONN / AS SYSDBA
SQL> show parameter audit
NAME                                 TYPE        VALUE
audit_trail                          string      DB
transaction_auditing                 boolean     TRUE
SQL> AUDIT SELECT ON SCOTT.EMP BY ACCESS WHENEVER SUCCESSFUL;
Audit succeeded.
SQL> conn scott/tiger
Connected.
SQL> select * from scott.emp;
     EMPNO ENAME      JOB              MGR HIREDATE         SAL       COMM     DEPTNO
      7369 SMITH      CLERK           7902 17-DEC-80        800                    20
      7499 ALLEN      SALESMAN        7698 20-FEB-81       1600        300         30
      7521 WARD       SALESMAN        7698 22-FEB-81       1250        500         30
      7566 JONES      MANAGER         7839 02-APR-81       2975                    20
      7654 MARTIN     SALESMAN        7698 28-SEP-81       1250       1400         30
      7698 BLAKE      MANAGER         7839 01-MAY-81       2850                    30
      7782 CLARK      MANAGER         7839 09-JUN-81       2450                    10
      7788 SCOTT      ANALYST         7566 19-APR-87       3000                    20
      7839 KING       PRESIDENT            17-NOV-81       5000                    10
      7844 TURNER     SALESMAN        7698 08-SEP-81       1500          0         30
      7876 ADAMS      CLERK           7788 23-MAY-87       1100                    20
      7900 JAMES      CLERK           7698 03-DEC-81        950                    30
      7902 FORD       ANALYST         7566 03-DEC-81       3000                    20
      7934 MILLER     CLERK           7782 23-JAN-82       1300                    10
14 rows selected.
SQL> select count(1) from scott.emp;
COUNT(1)
     14
SQL> CONN / AS SYSDBA
SQL> select username, timestamp, action_name
2 from DBA_AUDIT_TRAIL;
USERNAME                       TIMESTAMP ACTION_NAME
SCOTT                          01-NOV-06 SELECT
SCOTT                          01-NOV-06 SELECT
SQL>

How to Audit log T000 table

Similar Messages

Maybe you are looking for