Malicious Usage of Tcode FB01 - Log Question

Hi All
I have found a User who ran FB01 tcode in production system to post for a Company code which the user is not authorized,
I used the ST03N tcode to find the User has run the tcode on that day.
But the problem is the Usage log shows the user running the tcode under Update mode & not there is no log of the user running the tcode under Dialog mode.
I need to Determine if the user has run any batch jobs unknowingly & post for the wrong company code or is it delebarate action.
How can i prove this.
Plz clarify the course of action i need to take to prove whether this was intentional or unintensional action.
regards
Naveen

Hi,
ST03n in expert mode should give you the details. Probably the task type is the field which will let you know the mode in which the work process was executed. The different modes are:
D Dialog,U Update,S Spool,I Batch input,B Batch,E Enqueue.
For more details: please refer http://help.sap.com/saphelp_nw70/helpdata/EN/d7/7de93a2176a418e10000000a11402f/frameset.htm

Similar Messages

Usage of Tcodes?

Hi friends
what is the usage of Tcodes SPDD, SPAU, SE16 and SM30?
Regards
Simha

Hi
For deatils on trsanction SPDD and SPAU,refer the below thread:
Re: upgrade
In SE16,you can view any dictionary tables and their contents.
In SM30 ,you make any customizing entry for anyof the dictionary table.
HTH
BR,
Deepti.

Adding new field from BKPF to tcode FB01 appearing as on selection screen

Hi all,
Could u please let us know to add a field from table BKPF in tcode FB01 ?
1. We did BADI for 'FI_HEADER_SUB_1300 ' and added the required field in the layout.
2. After actiavting, the added field is not getting reflected in the tcode FB01.
Please tel us , where are we going wrong.

Looks like a similar requirement in this: How to Add XREF1_HD(Reference Key 1 internal for document Header) field to header level to transaction FB01

Who can tell me the usage of TCode:OMFS?

Who can tell me the usage of TCode:OMFS?
When we need to configurate these?
Thank in advance.

Hi,
By flagging a field on here, yes, that is what it is designed to do.
If you change the delivery address for instance you would surely need to tell the vendor? So you would flag these fields so that the new PO (which can be a PO with ONLY the changes on it, or a full reprint of the PO, depending on which you want), is printed and sent to the vendor.
If the Purchasing group is changed then you may decide that this should NOT trigger a print of the changes, so you don't flag that field.
It is entirely up to you which fields you flag, all, some or none.
There is a flag for each type of document (RFQ, PO, Contract and Scheduling agreement and so you can set different flags for each)
You can also specify the text number to control what the change text is, such as "Delivery address changed" etc.
You can even use special routines that can manage more complex actions for each change.
As susual the SAP system is giving you many options that you CAN use if you want to, but you don't have to use them if you don't want to.
Steve B

Basic log question

Just trying out backintime. I put it in crontabs and append to a log file. So far so good, but I don't get time or date of the last entry. Here the crontab entry:
*/45 * * * * backintime -b >>/tmp2/backintime/messages.log
Question: Do I have to fiddle around with the code of backintime to get more info or can I do something in the crontab entry?

> Hm, comparing stuff takes a long time
<gasp> With rsync if you don't change the contents much it shouldn't take more than a minute ... If you have a million tiny files it may take more but I guess you would like your backups to run perfectly, so you'd better check what's wrong.
BTW: Although Dillon's cron supports 'every n minutes' you may want to check '45 * * * *'. Are you using the "stock" Arch cron or some other one?
Last edited by karol (2009-12-18 15:37:02)

Usage of tcode FBWE

Dear experts,
I am new to Bill Of exchange functionality in SAP. Please let me know the usage of tcode FBWE.
Regards,
Vijay

Hi,
ST03n in expert mode should give you the details. Probably the task type is the field which will let you know the mode in which the work process was executed. The different modes are:
D Dialog,U Update,S Spool,I Batch input,B Batch,E Enqueue.
For more details: please refer http://help.sap.com/saphelp_nw70/helpdata/EN/d7/7de93a2176a418e10000000a11402f/frameset.htm

What is Settype and usage of tcode SLAPPROVER

Hi friends
what is settype and usage of tcode SLAPPROVER
SLAPPROVER means Spend Limit approver.will this be accessed only by manager or any other employees also .please let me know
Regards
Chinna

Hi Chinni,
(1)SLAPPROVER IS AN ATTRIBUTE in SRM .It is not a transaction in SRM. It Specifies the approver used in workflows based on a spending limit.
(2) r3prodstyp -This contains product subtype - view it comm_hierarchy .and you can see them when you browse product category set type tab.
check this tranasction COMM_PRAPPLCAT here product as Application mapped with R3PRODSTYP
hope it clarifies you.
regards
Muthu

HP 3800Dn color usage log question

We're trying to track usage on our HP 3800Dn, using the color usage log for information. However, many of the jobs are shown with no username, thus providing no information as to the source of the printing.
Does anyone know why no user would appear (other users do appear, so it sometimes works) in the log?
Thanks.....Kevin

@dansawyer
Welcome to the forums,
I read through your post about wanting to know more about how ink is used in your Officejet 8600. Check out the links I have posted for you below that will explain how it's used.
Ink Usage in Inkjet Printers
How HP measures inkjet page yields
I hope that helps, have a great Tuesday
R a i n b o w 7000I work on behalf of HP
Click the “Kudos Thumbs Up" at the bottom of this post to say
“Thanks” for helping!
Click “Accept as Solution” if you feel my post solved your issue, it will help others find the solution!

Usage Report and Audit Log report showing different totals

I am trying to understand the differences displayed in two similar reports. The first report is an 'Audit Log' Report and it is displaying the number of Resource Account creations over a time period. The second report is a Usage Report using the exact same criteria (objectType = Resource Account and Action = Create). The totals I get back are VASTLY different. Can anyone explain? Is this a known bug?

Hi,
In any report we don't show the storage policies information. In Cost report if the storage policies have different rate factors then we will show the split for the storage information. But in usage report , rate factors will not be applicable as we don''t show the cost details. Hope this clarifies your question. Please let us know if you need more information.
Thanks,
Lakshmi

How to track usage of tcodes for a particular Login id

*Hi experts,*
*Kindly tell me how to track the usage of transactions for a particular Login Id. Is there any tcode from which we can get the report for the same? If suppose 100 tcodes has been assigned to a particualr Login Id, I have to confirm whether in the last month have the users executed all the tcodes assigned to them or not.*
*Kindly revert for the same.*
*Thanks & Regards,*
*RESHMA*

Reshma,
The first thing you have to consider is why the tcode is in the role at first place, conventional wisdom is - Role was identified, its functions were identified (or the other way around) and then corresponding tcodes were identified to perform those functions and then role was updated with these tcodes. Now rather than approaching it through the frequency of tcode use, you shoudl revisit the business process or function and evaluate if it is still required in the role. Depending upon this requirement, you should reevaluate your role design. Usually you should just prepare the role-to-tcode matrix and have the business/Function review it periodically.
going by frequency can be misleading, I will give you a scenario - what if the user executes a tcode only once a quarter or 6 months or a year, with rest of the time the function is performed by junior staff or some other team member through a different role. So best practice I can suggest is to review the role-tcode matrix.
You can however check the frequency using Audit Logs in Sm18-20 as mentioned by Vikas above. These are pretty easy to configure but size of logs can get unmanageable depending upon filters.
Regards,
Shivraj

Tcode FB01

I m populating FB01 tcode...using BAPI BAPI_ACC_DOCUMENT_POST..in my flat file for populating Fb01..i have two fields vendor and account...but where r these fields in BAPI structure...but while entering values in FB01 i m entering both vendor and account values in same field rf05a-newko(account)...where is this field in BAPI structure..

see...if i have fields below...how to populate in BAPI...
Company     Document number     Document Type     Posting date     Document Date     Currency     Amount     Vendor no. Matriculation Number     Cost Center     Account     Order     Posting Key     Due Date     Text field     Special G/L     Assignment
DM10     E000000001     ES     27072009     27072009     EUR     200     1000006                    34     27072009     LAST DATE OF EXP.NOTE:27.07.2009          E000000001
DM10     E000000001     ES     27072009     27072009     EUR     200               1910011          40          EXP.NOTE NO:E000000001 EMPLOYEE NAME: MARIO Romani          E000000001
DM10     E000000001     ES     27072009     27072009     EUR     200     1000006                    25     27072009     LAST DATE OF EXP.NOTE:27.07.2009          E000000001
DM10     E000000001     ES     27072009     27072009     EUR     200               2103001          50          EXP.NOTE NO:E000000001 EMPLOYEE NAME: MARIO Romani          E000000001
where exactly i need to send to which structure...pls help....

Capturing the JVM heap usage information to a log

When using weblogic 6.1sp3 the console under monitoring/performance a graph is
displayed with the historical JVM heap usage information. Is there any way to
capture this information to a log?

For heap size before and after each gc, you could pass the -verbose:gc option to the JVM
on startup:
WLS C:\alex>java -verbose:gc weblogic.Admin PING 10 10
[GC 512K->154K(1984K), 0.0068905 secs]
[GC 666K->164K(1984K), 0.0069037 secs]
[GC 676K->329K(1984K), 0.0029822 secs]
[GC 841K->451K(1984K), 0.0038960 secs]
[GC 963K->500K(1984K), 0.0015452 secs]
[GC 1012K->598K(1984K), 0.0027509 secs]
[GC 1110K->608K(1984K), 0.0029370 secs]
[GC 1120K->754K(1984K), 0.0027361 secs]
[GC 1266K->791K(1984K), 0.0019639 secs]
[GC 1303K->869K(1984K), 0.0028314 secs]
[GC 1381K->859K(1984K), 0.0012957 secs]
[GC 1367K->867K(1984K), 0.0012504 secs]
[GC 1379K->879K(1984K), 0.0018592 secs]
[GC 1391K->941K(1984K), 0.0036871 secs]
[GC 1453K->988K(1984K), 0.0027143 secs]
Sending 10 pings of 10 bytes.
RTT = ~47 milliseconds, or ~4 milliseconds/packet
Looks like it might be too much info though...
Cheerio,
-alex
Fazle Khan wrote:
When using weblogic 6.1sp3 the console under monitoring/performance a graph is
displayed with the historical JVM heap usage information. Is there any way to
capture this information to a log?

BDC for AR Posting (Tcode - FB01)

Dear All,
I am unable to post multiple line items while postnig AR Invoice using BDC recording of FB01.
Can anyone provide me the BDC program code to post multiple line items.
Thanks in Advance,
Harish

hi,
please check your document type with tcode oba7
field cust./vend. check (t003-XKKPR) -> set value = X
pls reward useful answers
thx.
Andreas

Accessing Server Logs Question

I'm working on converting an old ASP application to a Java one, and have some questions.
The customer wants a semi-sophisticated auditing system built in to the application, but I'm not sure OAS can provide the same level of detailed logs that IIS did (at least, not without a JNI DLL somewhere).
One of the reports requested, "Client Errors", wants to output the following fields:
- Requested File
- Error Code
- Total Requests
- Client Description
- Error Description
- Win32 Description
There are about 2 dozen other reports, as well.
The questions:
1. Can OAS log this sort of information in an extended w3c log format (Win32 Description might not be possible without JNI)?
2. How is the best way for the application to get to these logs? (I currently envision a regular job running to read the log into a database table)
Sorry if these are dumb questions. Any help would be appreciated.

Each Report Server has a log in which it record each time a report is run.

Application Logging questions, SLG0

Hello all,
I have a couple of generic questions I would like to ask the users of this forum.
1. The people that are using application logging, in what types of situations do you use this functionality, interface programming, updating custom tables, etc.?
2. People that are aware of this functionality and are not using it, why are you not using it?
SAP help documentation has pretty good information about the different function modules that are part of this product.
Thanks
Bruce

Hi Bruce;
As part of the SAP's AII (Auto-ID) production, we use SLG1 extensively because that is where all of the application errors are stored by the system when it processes inbound or outbound messages.
The biggest pro is that it consolidates all of the logging information; the biggest con is that it is hard to search through all that information for a particular message, unless the document number is part of the message. It can be a challenge to find a particular log entry when there can be upwards of 2,500 in one day.
Cheers,
John

Malicious Usage of Tcode FB01 - Log Question

Similar Messages

Maybe you are looking for