Unsuccessful user id alert

[Former Member]

Hi,

     I have a requirement where i need to trigger email alert from SAP for all the unsuccessful user login, Is there any standard solution for the same in SAP? What are the possible option for this requirement.?

Regards,

Sam.

[former_member215345]

You can schedule a job using report RSAU_SELECT_EVENTS for generating audit log output as a spool request. This spool request can be send via email.

Required data in your case can be extracted by creating a variant for the report(eg: dialog logon + critical).

Prerequisite is audit log should be active(SM19/SM20).

Thanks and regards,

Jayadeep

[Former Member]

Hi Jayadeep,

     Thanks for the valuable information.

     But my business requirement is to trigger a mail when ever an unsuccessful logon happens IT security team? Is it not possible to do this in CCMS?

Regards

Sam.

[former_member215345]

Hi Sam,

Yes I think it is possible using CCMS.

Please check the monitoring template under RZ20 > ERP ABAP Application Server > Security > Logon 

Thanks and regards,

Jayadeep

[Sriram2009]

Hi Sam

You can find the Unsuccessful user login in transaction code SUIM. I am not sure above tthe alert.

Regards

SS

[Former Member]

Hi Sriram,

     Thanks for the immediate response. I know how to get the unsuccessful login details. But my requirement is to configure a mail alert to the specified IT  security team from SAP. So i want to know whether there is any standard feature to accomplish the same.

Regards,

Sam

[Sriram2009]

Hi Sam

1.  I think you have to create the new custom program from the transaction code "S_BCE_68001402"

2. Check this SAP link Security Monitor - The Alert Monitor - SAP Library

Regards

SS