{"id":1001,"date":"2014-02-04T14:52:46","date_gmt":"2014-02-04T11:52:46","guid":{"rendered":"http:\/\/www.fatihacar.com\/blog\/?p=1001"},"modified":"2014-02-04T18:23:04","modified_gmt":"2014-02-04T15:23:04","slug":"sap-security-audit-log-activation","status":"publish","type":"post","link":"http:\/\/www.fatihacar.com\/blog\/sap-security-audit-log-activation\/","title":{"rendered":"SAP Security Audit Log Activation"},"content":{"rendered":"<p>As of Release 4.0, you can use the Security Audit Log to record security-related system information such as changes to user master records or unsuccessful logon attempts. This log is a tool designed for auditors who need to take a detailed look at what occurs in the SAP System. By activating the audit log, you keep a record of those activities that you specify for your audit. You can then access this information for evaluation in the form of an audit analysis report.<br \/>\nThe Security Audit Log provides for long-term data access. The audit files are retained until you explicitly delete them. Currently, the Security Audit Log does not support the automatic archiving of the log files; however, you can manually archive them at any time.<\/p>\n<p><img loading=\"lazy\" decoding=\"async\" src=\"http:\/\/www.fatihacar.com\/blog\/resimler\/images1.jpg\" alt=\"SAP Security Audit Log\" width=\"225\" height=\"225\" class=\"aligncenter size-full wp-image-1028\" srcset=\"http:\/\/www.fatihacar.com\/blog\/resimler\/images1.jpg 225w, http:\/\/www.fatihacar.com\/blog\/resimler\/images1-150x150.jpg 150w\" sizes=\"auto, (max-width: 225px) 100vw, 225px\" \/><\/p>\n<p><strong>You can record the following information in the Security Audit Log<\/strong><\/p>\n<blockquote>\n<ul>\n<li>Successful and unsuccessful dialog logon attempts<\/li>\n<li>Successful and unsuccessful RFC logon attempts<\/li>\n<li>RFC calls to function modules<\/li>\n<li>Changes to user master records<\/li>\n<li>Successful and unsuccessful transaction starts<\/li>\n<li>Changes to the audit configuration<\/li>\n<\/ul>\n<\/blockquote>\n<p><strong>SAP Security Audit Log Activation Steps<\/strong><\/p>\n<p><strong>1 &#8211; Create Profile<\/strong><\/p>\n<blockquote>\n<p><strong>Tcode > SM19<\/strong><\/p>\n<figure id=\"attachment_1003\" aria-describedby=\"caption-attachment-1003\" style=\"width: 626px\" class=\"wp-caption aligncenter\"><img loading=\"lazy\" decoding=\"async\" src=\"http:\/\/www.fatihacar.com\/blog\/resimler\/16.jpg\" alt=\"SAP Security Audit Log 1\" width=\"626\" height=\"278\" class=\"size-full wp-image-1003\" srcset=\"http:\/\/www.fatihacar.com\/blog\/resimler\/16.jpg 626w, http:\/\/www.fatihacar.com\/blog\/resimler\/16-300x133.jpg 300w\" sizes=\"auto, (max-width: 626px) 100vw, 626px\" \/><figcaption id=\"caption-attachment-1003\" class=\"wp-caption-text\">SAP Security Audit Log 1<\/figcaption><\/figure>\n<figure id=\"attachment_1004\" aria-describedby=\"caption-attachment-1004\" style=\"width: 509px\" class=\"wp-caption aligncenter\"><img loading=\"lazy\" decoding=\"async\" src=\"http:\/\/www.fatihacar.com\/blog\/resimler\/23.jpg\" alt=\"SAP Security Audit Log 2\" width=\"509\" height=\"357\" class=\"size-full wp-image-1004\" srcset=\"http:\/\/www.fatihacar.com\/blog\/resimler\/23.jpg 509w, http:\/\/www.fatihacar.com\/blog\/resimler\/23-300x210.jpg 300w\" sizes=\"auto, (max-width: 509px) 100vw, 509px\" \/><figcaption id=\"caption-attachment-1004\" class=\"wp-caption-text\">SAP Security Audit Log 2<\/figcaption><\/figure><\/blockquote>\n<p><!--more--><br \/>\n<strong>2 &#8211; Active Filter<\/strong><\/p>\n<blockquote>\n<p><strong>Tcode > SM19<\/strong><\/p>\n<p>You can choose audit criteria with Filters.<\/p>\n<figure id=\"attachment_1005\" aria-describedby=\"caption-attachment-1005\" style=\"width: 580px\" class=\"wp-caption aligncenter\"><img loading=\"lazy\" decoding=\"async\" src=\"http:\/\/www.fatihacar.com\/blog\/resimler\/32.jpg\" alt=\"SAP Security Audit Log 3\" width=\"580\" height=\"758\" class=\"size-full wp-image-1005\" srcset=\"http:\/\/www.fatihacar.com\/blog\/resimler\/32.jpg 580w, http:\/\/www.fatihacar.com\/blog\/resimler\/32-229x300.jpg 229w\" sizes=\"auto, (max-width: 580px) 100vw, 580px\" \/><figcaption id=\"caption-attachment-1005\" class=\"wp-caption-text\">SAP Security Audit Log 3<\/figcaption><\/figure>\n<figure id=\"attachment_1006\" aria-describedby=\"caption-attachment-1006\" style=\"width: 577px\" class=\"wp-caption aligncenter\"><img loading=\"lazy\" decoding=\"async\" src=\"http:\/\/www.fatihacar.com\/blog\/resimler\/3-2.jpg\" alt=\"SAP Security Audit Log 3-2\" width=\"577\" height=\"417\" class=\"size-full wp-image-1006\" srcset=\"http:\/\/www.fatihacar.com\/blog\/resimler\/3-2.jpg 577w, http:\/\/www.fatihacar.com\/blog\/resimler\/3-2-300x216.jpg 300w\" sizes=\"auto, (max-width: 577px) 100vw, 577px\" \/><figcaption id=\"caption-attachment-1006\" class=\"wp-caption-text\">SAP Security Audit Log 3-2<\/figcaption><\/figure>\n<\/blockquote>\n<p><strong>3 &#8211; Profile Configuration<\/strong><\/p>\n<blockquote><p><strong>Tcode > RZ10<\/strong><\/p>\n<p>You have to set rsau\/enable parameter to 1 to active security audit log for all time.<\/p>\n<figure id=\"attachment_1018\" aria-describedby=\"caption-attachment-1018\" style=\"width: 572px\" class=\"wp-caption aligncenter\"><img loading=\"lazy\" decoding=\"async\" src=\"http:\/\/www.fatihacar.com\/blog\/resimler\/42.jpg\" alt=\"SAP Security Audit Log 4\" width=\"572\" height=\"415\" class=\"size-full wp-image-1018\" srcset=\"http:\/\/www.fatihacar.com\/blog\/resimler\/42.jpg 572w, http:\/\/www.fatihacar.com\/blog\/resimler\/42-300x217.jpg 300w\" sizes=\"auto, (max-width: 572px) 100vw, 572px\" \/><figcaption id=\"caption-attachment-1018\" class=\"wp-caption-text\">SAP Security Audit Log 4<\/figcaption><\/figure>\n<figure id=\"attachment_1019\" aria-describedby=\"caption-attachment-1019\" style=\"width: 632px\" class=\"wp-caption aligncenter\"><img loading=\"lazy\" decoding=\"async\" src=\"http:\/\/www.fatihacar.com\/blog\/resimler\/52.jpg\" alt=\"SAP Security Audit Log 5\" width=\"632\" height=\"556\" class=\"size-full wp-image-1019\" srcset=\"http:\/\/www.fatihacar.com\/blog\/resimler\/52.jpg 632w, http:\/\/www.fatihacar.com\/blog\/resimler\/52-300x263.jpg 300w\" sizes=\"auto, (max-width: 632px) 100vw, 632px\" \/><figcaption id=\"caption-attachment-1019\" class=\"wp-caption-text\">SAP Security Audit Log 5<\/figcaption><\/figure>\n<figure id=\"attachment_1021\" aria-describedby=\"caption-attachment-1021\" style=\"width: 549px\" class=\"wp-caption aligncenter\"><img loading=\"lazy\" decoding=\"async\" src=\"http:\/\/www.fatihacar.com\/blog\/resimler\/72.jpg\" alt=\"SAP Security Audit Log 6\" width=\"549\" height=\"397\" class=\"size-full wp-image-1021\" srcset=\"http:\/\/www.fatihacar.com\/blog\/resimler\/72.jpg 549w, http:\/\/www.fatihacar.com\/blog\/resimler\/72-300x216.jpg 300w\" sizes=\"auto, (max-width: 549px) 100vw, 549px\" \/><figcaption id=\"caption-attachment-1021\" class=\"wp-caption-text\">SAP Security Audit Log 6<\/figcaption><\/figure>\n<p><figure id=\"attachment_1020\" aria-describedby=\"caption-attachment-1020\" style=\"width: 433px\" class=\"wp-caption aligncenter\"><img loading=\"lazy\" decoding=\"async\" src=\"http:\/\/www.fatihacar.com\/blog\/resimler\/62.jpg\" alt=\"SAP Security Audit Log 7\" width=\"433\" height=\"430\" class=\"size-full wp-image-1020\" srcset=\"http:\/\/www.fatihacar.com\/blog\/resimler\/62.jpg 433w, http:\/\/www.fatihacar.com\/blog\/resimler\/62-150x150.jpg 150w, http:\/\/www.fatihacar.com\/blog\/resimler\/62-300x297.jpg 300w\" sizes=\"auto, (max-width: 433px) 100vw, 433px\" \/><figcaption id=\"caption-attachment-1020\" class=\"wp-caption-text\">SAP Security Audit Log 7<\/figcaption><\/figure><br \/>\nYou have to restart SAP Instances to active profile changes.<br \/>\n<figure id=\"attachment_1017\" aria-describedby=\"caption-attachment-1017\" style=\"width: 280px\" class=\"wp-caption aligncenter\"><img loading=\"lazy\" decoding=\"async\" src=\"http:\/\/www.fatihacar.com\/blog\/resimler\/82.jpg\" alt=\"SAP Security Audit Log 8\" width=\"280\" height=\"358\" class=\"size-full wp-image-1017\" srcset=\"http:\/\/www.fatihacar.com\/blog\/resimler\/82.jpg 280w, http:\/\/www.fatihacar.com\/blog\/resimler\/82-234x300.jpg 234w\" sizes=\"auto, (max-width: 280px) 100vw, 280px\" \/><figcaption id=\"caption-attachment-1017\" class=\"wp-caption-text\">SAP Security Audit Log 8<\/figcaption><\/figure>\n<\/p><\/blockquote>\n<p>You can show audit logs with tcode <strong>SM20<\/strong> , You can delete old logs with the transaction SM18 .<br \/>\n<strong>Source :<\/strong> SAP Offical Documents<\/p>\n","protected":false},"excerpt":{"rendered":"<p>As of Release 4.0, you can use the Security Audit Log to record security-related system information such as changes to user master records or unsuccessful logon attempts. This log is a tool designed for auditors who need to take a detailed look at what occurs in the SAP System. By activating the audit log, you&#8230;<\/p>\n","protected":false},"author":37,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"jetpack_post_was_ever_published":false,"_jetpack_newsletter_access":"","_jetpack_dont_email_post_to_subs":false,"_jetpack_newsletter_tier_id":0,"_jetpack_memberships_contains_paywalled_content":false,"_jetpack_memberships_contains_paid_content":false,"footnotes":""},"categories":[38,95],"tags":[98,55,41,22,25],"class_list":["post-1001","post","type-post","status-publish","format-standard","hentry","category-sap-basis","category-system-security","tag-sap-basis","tag-sap-security-audit-log","tag-sap-system-administration","tag-system-administration","tag-system-security"],"jetpack_featured_media_url":"","jetpack_shortlink":"https:\/\/wp.me\/p39NFI-g9","jetpack_sharing_enabled":true,"_links":{"self":[{"href":"http:\/\/www.fatihacar.com\/blog\/wp-json\/wp\/v2\/posts\/1001","targetHints":{"allow":["GET"]}}],"collection":[{"href":"http:\/\/www.fatihacar.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"http:\/\/www.fatihacar.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"http:\/\/www.fatihacar.com\/blog\/wp-json\/wp\/v2\/users\/37"}],"replies":[{"embeddable":true,"href":"http:\/\/www.fatihacar.com\/blog\/wp-json\/wp\/v2\/comments?post=1001"}],"version-history":[{"count":14,"href":"http:\/\/www.fatihacar.com\/blog\/wp-json\/wp\/v2\/posts\/1001\/revisions"}],"predecessor-version":[{"id":1030,"href":"http:\/\/www.fatihacar.com\/blog\/wp-json\/wp\/v2\/posts\/1001\/revisions\/1030"}],"wp:attachment":[{"href":"http:\/\/www.fatihacar.com\/blog\/wp-json\/wp\/v2\/media?parent=1001"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"http:\/\/www.fatihacar.com\/blog\/wp-json\/wp\/v2\/categories?post=1001"},{"taxonomy":"post_tag","embeddable":true,"href":"http:\/\/www.fatihacar.com\/blog\/wp-json\/wp\/v2\/tags?post=1001"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}