SAP Security Audit Log
The Security Audit Log is a tool designed for auditors who
need to take a detailed look at what occurs in the SAP system. By activating
the audit log, you keep record of those activities you consider relevant for
auditing. This information is recorded on a daily basis in an audit file on
each application server. You can then access this information for evaluation in
the form of an audit analysis report. Statistical information can easily be
retrieved on transactions and reports.
The audit log’s main objective is to record:
·
Security-related
changes to the SAP System environment
(for example, changes to user master records)
(for example, changes to user master records)
·
Information that
provides a higher level of transparency
(for example, successful and unsuccessful logon attempts)
(for example, successful and unsuccessful logon attempts)
·
Information that
enables the reconstruction of a series of events
(for example, successful or unsuccessful transaction starts)
(for example, successful or unsuccessful transaction starts)
Specifically, you can record the following
information in the Security Audit Log:
- Successful
and unsuccessful dialog logon attempts
- Successful
and unsuccessful RFC logon attempts
- RFC
calls to function modules
- Successful
and unsuccessful transaction starts
- Successful
and unsuccessful report starts
- Changes
to user master records
- Changes
to the audit configuration
To Configure the audit log : SM19
To Analysis audit log : SM20
To Delete old log : SM18
Before you activate the audit log you have to setup several
parameters in RZ10
:
rsau/enable :
Set to 1 to activates audit logging
rsau/local/file : Name and location of the audit log
file
rsau/max_diskspace/local :
Max. space of the audit file. If maximum size is reached auditing stops.
rsau/selection_slots : Max. number of filters
rsau/max_diskspace/local : Max. space of the audit file. If
maximum size is reached auditingstops.
rsau/max_diskspace/per_file : minimum is 1MB & Maximum is 2 GB
rsau/max_diskspace/per_day : minimum
value should be 3*per_file & maximum 1024 GB.Socheck
these parameter.
Subscribe to:
Post Comments
(
Atom
)
No comments :
Post a Comment