Identify who deleted a petition o an infocube

Hi gurus. I've been facing a problem has happened before, which have been deleted request from an InfoCube. I would like to detect what user has deleted from it. I know there is a table in SAP BW which is hosted this information, but I've forgotten the name of the table (which for example can access through the InfoCube name and show me the result of the query). Any helpfull anwers will be appreciated. Thanks in advance. Ignacio

Hi,
please take basis team help and check at T code - SLG1.
if deletion was happens recently then you can provide date ranges, so that might be helpful to find that old logs.
Thanks

Similar Messages

If db is in simple recovery mode can we identify who deleted the login id?

if db is in simple recovery mode can we identify who deleted the login id?

You can take a look in the default trace to find who dropped it. If you are lucky enough.
The database being in simple recovery mode has nothing to do with it. Even in full recovery mode this is not going to be seperately logged.
SELECT TE.name AS [EventName] ,
v.subclass_name ,
T.DatabaseName ,
t.DatabaseID ,
t.NTDomainName ,
t.ApplicationName ,
t.LoginName ,
t.SPID ,
t.StartTime ,
t.RoleName ,
t.TargetUserName ,
t.TargetLoginName ,
t.SessionLoginName
FROM sys.fn_trace_gettable(CONVERT(VARCHAR(150), ( SELECT TOP 1
f.[value]
FROM sys.fn_trace_getinfo(NULL) f
WHERE f.property = 2
)), DEFAULT) T
JOIN sys.trace_events TE ON T.EventClass = TE.trace_event_id
JOIN sys.trace_subclass_values v ON v.trace_event_id = TE.trace_event_id
AND v.subclass_value = t.EventSubClass
WHERE te.name IN ( 'Audit Addlogin Event', 'Audit Add DB User Event',
'Audit Add Member to DB Role Event' )
AND v.subclass_name IN ( 'Drop', 'Revoke database access' )
https://www.simple-talk.com/sql/performance/the-default-trace-in-sql-server---the-power-of-performance-and-security-auditing/
This query is only going to check the last trace file and by default you have four others, putting path instead of the subquery to find the trace path will also work.
Regards, Ashwin Menon My Blog - http:\\sqllearnings.com

How to identify who deleted the particular management pack?

In our environment someone deleted the custom management pack. Is it possible to find who deleted that management pack?
Thanks in advance.
Regards
Karthick

Hi,
Some people askd the same feature, but it seems the answer is no:
How to track management pack changes in Management Group
http://social.technet.microsoft.com/Forums/en-US/e7fd3bcb-d9d7-4c65-953f-7311e650fb11/how-to-track-management-pack-changes-in-management-group
Regards,
Yan Li
Regards, Yan Li

Who deleted the Bex query

Hi All,
somebody deleted one query in production system.
i wanted to findout who deleted it.
can anybody explain how to identify who deleted it.
i searched in forum, but not found the solution.
Thanks in advance,
Krishna

Hi,
Go to table 'RSRREPDIR' in production and give your Query Name as a input for COMPID field and execute.
Take the COMPUID value from that and Go to table 'E071' and execute it with COMPUID.
In 'E071' table, there is a field called OBJFUNC. This field get populate with value 'D' is some one deleted the query. Also
you can see the transport under which it got deleted. Trace the TR in SE09 and find the user.
This you can find only if the query is deleted in Dev and captured in transports and moved to production.
Mostly in production, ppl will not have access to delete any thing but I am not sure how is it in your system. If ppl
have access and they did directly from production means I dont know whether it will get captured in the above tables.
Try and let me know, whether its working or not.
If not I will try to provide some other way.
Regards,
Jackie.

Locate, identify and delete/disable a remote sharer/user

How can I locate, identify and delete/disable a remote user?
I have already disabled guest account, disabled and locked share files etc.yet I still suspect they are accesssing my hard drive and internet.
I also want to know if it is possible to find a username of the remote user on my hard drive that can possibly identify them?
Thank you

Thanks Eric, i have turned on the firewall recently, and after your advice just checked the terminal. As I had to re-install OS X Ia am the only user in history, But that is Useful to know for the future. At times, when I open security, share or accounts in System Preferences I find the padlock unlocked. Especially of late when I am very mindful of double checking they are locked before I close down that window.
I Suspect an ex friend who is a workmate accessed my computer or took my original start-up disks, then returned without knowing, is there any way of knowing if they have access on their computer from using those discs somehow? I Know it sounds all too 'conspiracy theory', lol, but it is something I've had brought to my attention.
Thanks, your advice is appreciated

How to find out who deleted the directory in Unix

Hi Experts,
In my system some body tampered the directories, and more over some body deleted the bin directory under the /usr/sap/trans in Unix operating system. now i am checking to find out who deleted and for the more logs.
i am unable to find out the user name and deleted directory logs..i know its completely related to the unix level but mean time i am searching for the same.
Any ideas and clues will be heighly appreciated.
-Srini

To know the OS would have been helpful
First ask the people around you if anybody did it, maybe he is man enough to admit...
Try to find out who logged at the time when the directory was deleted.
- check the OS syslog (/var/adm/syslog/syslog.log for hp-ux, /var/log/messages for linux)
- try the last commando to get a list of who logged on when
- check the command histories of the sidadm, root user, use the history command, or the h alias
- check if there are scripts running, which regularly delete files
As the trans directory might be NFS mounted to other servers, you might need to do the checks there too.
Best regards, Michael

How do i know who deleted file/folder in Windows 7 ?

Someone deleted files from Windows 7,i do not know it is remote or local.
I want to know how was deleted ?
And can i know what anybody doing (delete,add anything and etc.) on Windows 7 ?

You need to enable auditing from either local policies or domain policies and apply it to the machine . you need to configure auditing on everything, you want to audit. Please following the given steps:
1.Configure audit object access in AD Group Policy or on the server's local GPO.
Computer Configuration --> Windows Settings --> Security Settings --> Local Policies --> Audit Policy --> Audit object Access
Once that is in place, go to the folder you want to monitor, right click and go to properties
2. Configure an audit entry on the specific folder's that you want to audit. Right-click on the folder-->Properties-->Advanced. From the Auditing tab, click Add and then enter the users/groups whom you want to audit and what actions you want to audit
- auditing Full Control will create an audit entry every time anyone opens/changes/closes or deletes a file, or you can just audit for delete operations. You are now auditing that folder. You will need to monitor the event logs for the particular events.
An alternate option available is here. You can try this utility (
http://www.fileserverauditing.com) to find out who deleted specific files or folder.

How to find out who deleted the central person ID of a pernr.

Hi,
I have a pernr 100 whose central person ID is deleted. I would like to know how can i find out who deleted it. Which table gives this information.
Thanks & Regards,
Soumya.

It is stored as a relationship in HRP1001 & unless you have table logging turned on for this db table, I don't think you will be able to find out who deleted the Central Person. You can try running the Report RHCDOC_DISPLAY .
~Suresh

How to find out when data was deleted from table in oracle and Who deleted that

HI Experts,
Help me for below query:
how to find out when data was deleted from table in oracle and Who deleted that ?
I did that to fidn out some data from dba_tab_modifications, but I m not sure that what timestamp shows, wether it shows for update,insert or delete time ?
SQL> select TABLE_OWNER,TABLE_NAME,INSERTS,UPDATES,DELETES,TIMESTAMP,DROP_SEGMENTS,TRUNCATED from dba_tab_modifications where TABLE_NAME='F9001';
TABLE_OWNER                    TABLE_NAME                        INSERTS    UPDATES    DELETES     TIMESTAMP         DROP_SEGMENTS TRU
PRODCTL                        F9001                                                     1683         46       2171            11-12-13 18:23:39             0                   NO
Audit is enable in my enviroment?
customer is facing the issue and data missing in the table and I told him that yes there is a delete at 11-12-13 18:23:39 in table after seeing the DELETS column and timestamp in dba_tab_modifications, but not sure I am right or not
SQL> show parameter audit
NAME                                 TYPE        VALUE
audit_file_dest                      string      /oracle/admin/pbowe/adump
audit_sys_operations                 boolean     TRUE
audit_syslog_level                   string
audit_trail                          string      DB, EXTENDED
please help
Thanks
Sam

LOGMiner --> Using LogMiner to Analyze Redo Log Files
AUDIT --> Configuring and Administering Auditing

How to find out who deleted the standard table enteries

Hi,
Somebody has deleted entire KNA1 in one of our systems. Is there any way to find out who deleted the entries?
Thanks & Regards,
Kumaran Duraiswamy.

Hi
Look for help from an ABAPer. Go to SE11 for KNA1, use 'where-used list (ctrlshiftF3) and search for report that begin with Z* or Y* (perhaps LZ* or LY*, ie: function modules). See the ABAP coding if there is any instructions type:
DELETE kna1 FROM xxx.
Check too if the option &SAP_EDIT in tcode SE16N works in your system (see SAP Note 1420281 - CO-OM tools: SE16N: Deactivating &SAP_EDIT for instance)
I hope this helps you
Regards
Eduardo
PD: I forgot it, if option &SAP_EDIT works in SE16N, check the tables SE16N_CD_DATA and SE16N_CD_KEY.
Edited by: E_Hinojosa on Jun 24, 2011 11:04 AM

How to track the user who deleted the info object.

Dear Gurus,
In our BI system one info object has got deleted. If I need to track the user who has deleted that how can I track it(in which DBtable). And the complication is one user ID is being used by many people, in this case how can I track that from which machine the Info Object has been deleted(if there is any possibility to track the machines by IP address).
Kindly let me know if there is any procedure to find it out. Your help will be rewarded with a great honour.
Regards
Mohan Kumar

Hi dear,
you have to go in SLG1 transaction, and then select
Object: RSD
Subobject: IOBJ_DEL
External ID: (put here the name of your deleted IO)
Then choose a time range...and voilà, you can find the user who deleted the IO...
Hope it helps!
Bye,
Roberto
About the IP...look at USR41 table, but I think it's a bit difficult fo find data referred to the past...
If you haven't activated logon auditing in SM19...

How to find the user who deleted the contents of DSO.

Dear friends,
Can u please tell me ,how to find the user who deleted the contents of the DSO.
The user has deleted the complete contents of the DSO. We need to find the user ,date and time.
regards,
Vijai

Hi,
If the user has used the manage option to delete the contents of the DSO then the changed by field will be updated by the users name. In case a program is used for the deletion then it wont be the case.
Regards
Govind.

How to find out who deleted a Bank Number

Hi Guru,
How can I find out who deleted a bank number for a particular country. Thanks!
Regards,
Ajit

Hi,
Go to SCU3 transaction, enter the relevant object and you will see the logs.
Regards,
Eli

How can I identify and delete duplicate photos

is there a way to identify and delete duplicate photo's in I photo?

No one is suggesting that you download third party "crap". What was suggested is that you download a well established and supported 3rd party application. As to why there isn't a "'delete your stupid duplicate photo' option", you'll need to ask Apple that. Apple aren't here. This forum is for Users to help other Users. As to why you import stupid photos, you'll need to ask yourself.
Regards
TD

How can I identify and delete duplicates on the latest version of itunes?

How can I identify and delete duplicates on the lastest version of iTunes?

The show duplicates/show exact duplicates features have been left out of iTunes 11. Rumor suggests they will be restored in the next build. In the meantime I have written two Windows scripts to make playlists of Duplicates and Exact Duplicates, either from a selection of tracks or the entire library. Note that, as with the iTunes feature, this list makes no distinction between "originals" and "dupes", you have to decide which is which.
There is also my DeDuper script for automatically removing duplicate copies but keeping one remaining copy of each set. This can preserve ratings, play counts, playlist membership, etc. which are lost in a manual clean up. Please take note of the warning to backup your library before deduping. See this thread for background on deduping and the script.
If you want to manually remove duplicate tracks use shift-delete to remove selected tracks from the library as well as the playlist. Keep one of each repeated group of files and don't send the others to the recycle bin unless you are sure that there are multiple files on the disc as opposed to multiple entries to the same file. Same advice to backup applies.
tt2

Identify who deleted a petition o an infocube

Similar Messages

Maybe you are looking for