SAP Security Audit Log

No comments

The Security Audit Log is a tool designed for auditors who need to take a detailed look at what occurs in the SAP system. By activating the audit log, you keep record of those activities you consider relevant for auditing. This information is recorded on a daily basis in an audit file on each application server. You can then access this information for evaluation in the form of an audit analysis report. Statistical information can easily be retrieved on transactions and reports.
The audit log’s main objective is to record:
·         Security-related changes to the SAP System environment
(for example, changes to user master records)
·         Information that provides a higher level of transparency
(for example, successful and unsuccessful logon attempts)
·         Information that enables the reconstruction of a series of events
(for example, successful or unsuccessful transaction starts)

Specifically, you can record the following information in the Security Audit Log:
  • Successful and unsuccessful dialog logon attempts
  • Successful and unsuccessful RFC logon attempts
  • RFC calls to function modules
  • Successful and unsuccessful transaction starts
  • Successful and unsuccessful report starts
  • Changes to user master records
  • Changes to the audit configuration

To Configure the audit log :           SM19
To Analysis audit log         :           SM20
To Delete old log               :           SM18
  
Before you activate the audit log you have to setup several parameters in RZ10 :
  rsau/enable                            :           Set to 1 to activates audit logging
rsau/local/file                          :           Name and location of the audit log file
rsau/max_diskspace/local       :           Max. space of the audit file. If maximum size is reached auditing stops.
rsau/selection_slots                 :           Max. number of filters
rsau/max_diskspace/local       :           Max. space of the audit file. If maximum size is reached auditingstops.
rsau/max_diskspace/per_file  :           minimum is 1MB & Maximum is 2 GB
rsau/max_diskspace/per_day :            minimum value should be 3*per_file & maximum                                                                                   1024 GB.Socheck these parameter.


No comments :

Post a Comment