SAP Security audit log activation - SM19

Security audit log record security related system information's

You can record the following information's when activation SAP Audit log :

• Successful and unsuccessful dialog logon attempts 
• Successful and unsuccessful RFC logon attempts 
• Changes to user master records
• Successful and unsuccessful transaction starts
• RFC calls to function modules
• Changes to SAP audit configuration 

Add the following profile parameters in "Instance Profile" for activation SAP Audit

rsau/enable	1 ( 0 – deactivate , 1 activate)
rsau/local/file	File location of audit log (usr/sap/SID/<instno>/log/audit_<instance_number>
rsau/max_diskspace_local	Size of audit log (default –  1,000,000)
rsau/selection_slots	Number of selection slots (default – 2)

After change the Profile parameters "Restart your SAP system"

Goto -----> SM19

                           

Click "Create" option

                         

Set name for Audit log, the formate will be "SIDAUDIT"

SID - your sap system ID

                               

Choose the audit option like the above Image, 

For all users and client use "*" for both, and choose audit classes that you want in log,

After this, "Save" the Audit Log

                      

Click on Active option to activate the Audit log,

Now the Audit Log is activate on your System, you can check the audit log using T-Code SM20

You can use the following links for audit log deletion  

Delete Old Audit Logs in SAP - SM18

Thanks for reading, Please share your valuable feedback.  

Share this

Basis Genie