Who deleted a BW query

Does any body know which tcode can I use to know who deleted a BW query? Thanks.

HI Yimeng
There are many ways of doing this.
The best option would be RSRTRACE transaction code. Here you can activate logging for a user or you can view all the existing logs. You can also drill down to RSRCATTTRACE in this transcation code.

Similar Messages

  • Who deleted the Bex query

    Hi All,
    somebody deleted one query in production system.
    i wanted to findout who deleted it.
    can anybody explain how to identify who deleted it.
    i searched in forum, but not found the solution.
    Thanks in advance,
    Krishna

    Hi,
    Go to table 'RSRREPDIR' in production and give your Query Name as a input for COMPID field and execute.
    Take the COMPUID value from that and Go to table 'E071' and execute it with COMPUID.
    In 'E071' table, there is a field called OBJFUNC. This field get populate with value 'D' is some one deleted the query. Also
    you can see the transport under which it got deleted. Trace the TR in SE09 and find the user.
    This you can find only if the query is deleted in Dev and captured in transports and moved to production.
    Mostly in production, ppl will not have access to delete any thing but I am not sure how is it in your system. If ppl
    have access and they did directly from production means I dont know whether it will get captured in the above tables.
    Try and let me know, whether its working or not.
    If not I will try to provide some other way.
    Regards,
    Jackie.

  • How to find out who has deleted the production Query

    Hi All,
    I have searche SD , i can find it for infoobject deletion but i couldn't find it for Query.
    Please let me know is there any possiblity to kow
        How to find out who has deleted the production Query
    Awaiting for your replies.
    cheers

    Hi Mahesh and all,
    Thanks for all your  inputs.
    I have tried with RSRREPDIR tabel , I am unable to see that query at all.
    If I use theT-code SLG1,
      please guide me on the steps with paramets to be given in the respective ..object, subobject etc..
    OR
    could you please suggest any other way.
    cheers
    leena

  • How to find out when data was deleted from table in oracle and Who deleted that

    HI Experts,
    Help me for below query:
    how to find out when data was deleted from table in oracle and Who deleted that ?
    I did that to fidn out some data from dba_tab_modifications, but I m not sure that what timestamp shows, wether it shows for update,insert or delete time ?
    SQL> select TABLE_OWNER,TABLE_NAME,INSERTS,UPDATES,DELETES,TIMESTAMP,DROP_SEGMENTS,TRUNCATED from dba_tab_modifications where TABLE_NAME='F9001';
    TABLE_OWNER                    TABLE_NAME                        INSERTS    UPDATES    DELETES     TIMESTAMP         DROP_SEGMENTS TRU
    PRODCTL                        F9001                                                     1683         46       2171            11-12-13 18:23:39             0                   NO
    Audit is enable in my enviroment?
    customer is facing the issue and data missing in the table and I told him that yes there is a delete at 11-12-13 18:23:39 in table after seeing the DELETS column and timestamp in dba_tab_modifications, but not sure I am right or not
    SQL> show parameter audit
    NAME                                 TYPE        VALUE
    audit_file_dest                      string      /oracle/admin/pbowe/adump
    audit_sys_operations                 boolean     TRUE
    audit_syslog_level                   string
    audit_trail                          string      DB, EXTENDED
    please help
    Thanks
    Sam

    LOGMiner --> Using LogMiner to Analyze Redo Log Files
    AUDIT --> Configuring and Administering Auditing

  • Who deleted or changed data

    Hi All,
    Is there a transaction to know to who deleted the plan version or changed the plan version in KP97?
    and  t code to find who deleted or changed master data in finance.
    Our posting periods T001B have also been changed and amounts posted to wrong periods and one of the virement.
    WE ARE HAVING ISSUE AS BELOW--
    I too looked at both tables COBK and COEJ and noticed that the documents were not shown in table COEJ. If these records have been deleted I'm not sure how to check this unless the system can show an audit trail of when table COEJ was last edited? (Presuming that the only way to delete these records is to physically delete them from the table directly?)
    The entries on 10th August 2009 in plan version 3 shown in the screenshot below relates as you say to the overnight job through transaction ZPVC, this transaction must have picked up that on the 10th August records were missing from table COEJ and therefore recognised this and therefore posted the difference, for example ZPVC realised that in table COEJ ledger code 200310/55010 now totals to £2,289,824 and not £2,069,324.
    AND COULD BELOW EXPLANATION BE A REASON FOR ABOVE PROBLEM*********
    The point of my e mail is to query whether this issue could be related to the changes made during the weekend of the 8th and 9th of August, just prior to go live with the system enhancements. The other issue which leads me to believe that this could be related to the go live transition, is that on Monday the 10th August we discovered that the period settings had been changed from current period 5 to previous period 4.
    Thankfully we were able to confirm that no postings were made to period 4 during this time which would have lead to errors in the accounts.
    ANY LEAD ON THIS WILL BE HIGHLY APPRECIATED.
    Thanks!

    Hi,
    To see the IMG changes proceed as follows;
    Position Cursor on the IMG node and click on "Change Log" button (F7). If table loggin is not enabled then you may not be able to see the changes already made. But to track future changes in IMG settings you may Activate Table Logging at the Client Lebel. This can be helped by Basis Team. To check
    For changes made using KP97 you will be able to see changes in the planning screen. Go to KP06 or KP26 or KP46 and select the values and press overview button. Then position cursor on the value that you think has got changed and click Line Items (CTRL + SHIFT + F3) you will see the changes.
    For changes to FI Master data there are different TCodes;
    FS04 - Display changes to GL master centrally etc.
    The user id will be available in the change log.
    Thanks,

  • If db is in simple recovery mode can we identify who deleted the login id?

    if db is in simple recovery mode can we identify who deleted the login id?

    You can take a look in the default trace to find who dropped it. If you are lucky enough.
    The database being in simple recovery mode has nothing to do with it. Even in full recovery mode this is not going to be seperately logged.
    SELECT TE.name AS [EventName] ,
    v.subclass_name ,
    T.DatabaseName ,
    t.DatabaseID ,
    t.NTDomainName ,
    t.ApplicationName ,
    t.LoginName ,
    t.SPID ,
    t.StartTime ,
    t.RoleName ,
    t.TargetUserName ,
    t.TargetLoginName ,
    t.SessionLoginName
    FROM sys.fn_trace_gettable(CONVERT(VARCHAR(150), ( SELECT TOP 1
    f.[value]
    FROM sys.fn_trace_getinfo(NULL) f
    WHERE f.property = 2
    )), DEFAULT) T
    JOIN sys.trace_events TE ON T.EventClass = TE.trace_event_id
    JOIN sys.trace_subclass_values v ON v.trace_event_id = TE.trace_event_id
    AND v.subclass_value = t.EventSubClass
    WHERE te.name IN ( 'Audit Addlogin Event', 'Audit Add DB User Event',
    'Audit Add Member to DB Role Event' )
    AND v.subclass_name IN ( 'Drop', 'Revoke database access' )
    https://www.simple-talk.com/sql/performance/the-default-trace-in-sql-server---the-power-of-performance-and-security-auditing/
    This query is only going to check the last trace file and by default you have four others, putting path instead of the subquery to find the trace path will also work.
    Regards, Ashwin Menon My Blog - http:\\sqllearnings.com

  • How to find out who deleted the directory in Unix

    Hi Experts,
    In my system some body tampered the directories, and more over some body deleted the bin directory under the /usr/sap/trans in Unix operating system. now i am checking to find out who deleted and for the more logs.
    i am unable to find out the user name and deleted directory logs..i know its completely related to the unix level but mean time i am searching for the same.
    Any ideas and clues will be heighly appreciated.
    -Srini

    To know the OS would have been helpful
    First ask the people around you if anybody did it, maybe he is man enough to admit...
    Try to find out who logged at the time when the directory was deleted.
    - check the OS syslog (/var/adm/syslog/syslog.log for hp-ux, /var/log/messages for linux)
    - try the last commando to get a list of who logged on when
    - check the command histories of the sidadm, root user, use the history command, or the h alias
    - check if there are scripts running, which regularly delete files
    As the trans directory might be NFS mounted to other servers, you might need to do the checks there too.
    Best regards, Michael

  • How to delete a Bex Query

    Dear All,
    I am trying to delete a bex query using tcode RSZDELETE  and i also tried deleting directly from table RSZCOMPDIR. i am unable to delete.....is there any other option??????????/
    Regards,
    SV BHALAJI

    Are you sure there are no work books build on this query and check if any of the other query variables etc are used in your query which you want to delete?
    1. use transaction RSZDELETE
    2. run program COMPONENT_REORG
    3. go to query designer open the query and say delete.
    To delete workbook .......SE37 > RRMX_WORKBOOKS_DELETE, but to use this you will need to technical names of the workbooks.

  • How do i know who deleted file/folder in Windows 7 ?

    Someone deleted files from Windows 7,i do not know it is remote or local.
    I want to know how was deleted ?
    And can i know what anybody doing (delete,add anything and etc.) on Windows 7 ?

    You need to enable auditing from either local policies or domain policies and apply it to the machine . you need to configure auditing on everything, you want to audit. Please following the given steps:
    1.Configure audit object access in AD Group Policy or on the server's local GPO.
    Computer Configuration --> Windows Settings --> Security Settings --> Local Policies --> Audit Policy --> Audit object Access
    Once that is in place, go to the folder you want to monitor, right click and go to properties
    2. Configure an audit entry on the specific folder's that you want to audit. Right-click on the folder-->Properties-->Advanced. From the Auditing tab, click Add and then enter the users/groups whom you want to audit and what actions you want to audit
    - auditing Full Control will create an audit entry every time anyone opens/changes/closes or deletes a file, or you can just audit for delete operations. You are now auditing that folder. You will need to monitor the event logs for the particular events.
    An alternate option available is here. You can try this utility (
    http://www.fileserverauditing.com) to find out who deleted specific files or folder. 

  • How to find out who deleted the central person ID of a pernr.

    Hi,
    I have a pernr 100 whose central person ID is deleted. I would like to know how can i find out who deleted it. Which table gives this information.
    Thanks & Regards,
    Soumya.

    It is stored as a relationship in HRP1001 & unless you have table logging turned on for this db table, I don't think you will be able to find out who deleted the Central Person. You can try running the Report RHCDOC_DISPLAY .
    ~Suresh

  • How to find out who deleted the standard table enteries

    Hi,
    Somebody has deleted entire KNA1 in one of our systems. Is there any way to find out who deleted the entries?
    Thanks & Regards,
    Kumaran Duraiswamy.

    Hi
    Look for help from an ABAPer. Go to SE11 for KNA1, use 'where-used list (ctrlshiftF3) and search for report that begin with Z* or Y* (perhaps LZ* or LY*, ie: function modules). See the ABAP coding if there is any instructions type:
      DELETE kna1 FROM xxx.
    Check too if the option &SAP_EDIT in tcode SE16N works in your system (see SAP Note 1420281 - CO-OM tools: SE16N: Deactivating &SAP_EDIT for instance)
    I hope this helps you
    Regards
    Eduardo
    PD: I forgot it, if option &SAP_EDIT works in SE16N, check the tables SE16N_CD_DATA and SE16N_CD_KEY.
    Edited by: E_Hinojosa on Jun 24, 2011 11:04 AM

  • How to track the user who deleted the info object.

    Dear Gurus,
    In our BI system one info object has got deleted.  If I need to track the user who has deleted that how can I track it(in which DBtable).  And the complication is one user ID is being used by many people, in this case how can I track that from which machine the Info Object has been deleted(if there is any possibility to track the machines by IP address).
    Kindly let me know if there is any procedure to find it out. Your help will be rewarded with a great honour.
    Regards
    Mohan Kumar

    Hi dear,
    you have to go in SLG1 transaction, and then select
    Object: RSD
    Subobject: IOBJ_DEL
    External ID: (put here the name of your deleted IO)
    Then choose a time range...and voilà, you can find the user who deleted the IO...
    Hope it helps!
    Bye,
    Roberto
    About the IP...look at USR41 table, but I think it's a bit difficult fo find data referred to the past...
    If you haven't activated logon auditing in SM19...

  • How to find the user who deleted the contents of DSO.

    Dear friends,
    Can u please tell me ,how to find the user who deleted the contents of the DSO.
    The user has deleted the complete contents of the DSO. We need to find the user ,date and time.
    regards,
    Vijai

    Hi,
    If the user has used the manage option to delete the contents of the DSO then the changed by field will be updated by the users name. In case a program is used for the deletion then it wont be the case.
    Regards
    Govind.

  • How to find out who deleted a Bank Number

    Hi Guru,
    How can I find out who deleted a bank number for a particular country. Thanks!
    Regards,
    Ajit

    Hi,
    Go to SCU3 transaction, enter the relevant object and you will see the logs.
    Regards,
    Eli

  • How can I find who deleted my files?

    Hello all.
    In my local network, A user see my share partitions and files then removed them, How can I find who did it?
    THanks.

    This question is duplicated (and answered) in:
    how can track who deleted file/folder from Windows Server 2008
    regards

Maybe you are looking for