Skip to Content
author's profile photo Former Member
0
Former Member

GRC Acces Control: Firefighter Logs Not Picking Up Changes

Posted on Aug 10, 2016 at 07:55 AM 354 Views

Hi all,

Question that I'd appreciate some help on. GRC firefighter request and provisioning is working as expected. We are having an issue with one of our connectors in that the firefighter log is only showing transactions executed and not any changes made while in the firefighter. I checked the table in the back-end system (CDHDR) and the firefighter information is not stored there, however, other changes are (but also not all). How can we direct this table to store the required firefighter change data so that GRC can collect it?

Thanks,

Tracy

Add a comment
10|10000 characters needed characters exceeded

Assigned Tags

Related questions

4 Answers

  • author's profile photo Artem Ivashkin
    Artem Ivashkin
    Posted on Aug 10, 2016 at 08:29 AM
    0

    Hi Tracy,

    This table indeed stores tcode, but besides the system stores the data in tables:

    CDCLS Cluster structure for change documents

    CDPOS_STR Additional Change Document - Table for STRINGs

    CDPOS_UID Additional Table for Inclusion of TABKEY>70 Characters

    BTW, maybe you expect to get the data for Z tcode that was not assigned to object of CDHDR.

    Regards,

    Artem

    Add a comment
    10|10000 characters needed characters exceeded

  • author's profile photo Former Member
    Former Member
    Posted on Aug 10, 2016 at 08:52 AM
    0

    Hi Tracy,

    First of all, you have not specified the version and SP level.

    Have you maintained the parameter 4003(Retrieve Change Log) to YES.

    Regarding your issue , is there any dump in the plug-in system when you run the EAM sync job?

    Kindly check if the below Notes help

    1962440 - GRC EAM - Change Log Collection Performance Enhancement

    2175199 - AC 10.X : Dump in plugin system for EAM Sync Job in GET_CHANGED_LOG & New Values of the Change Logs are not captured.

    Regards,

    Manju

    Add a comment
    10|10000 characters needed characters exceeded

    Comment on This Answer
  • author's profile photo Former Member
    Former Member
    Posted on Aug 10, 2016 at 02:51 PM
    0

    Are parameters 4003, 4004, 4005, 4006 all set to YES?

    Regards,

    Jamie

    Add a comment
    10|10000 characters needed characters exceeded

  • author's profile photo Former Member
    Former Member
    Posted on Aug 10, 2016 at 04:05 PM
    0

    Hello Tracy,

    Please confirm, that you have scheduled GRAC_SPM_LOG_SYNC_UPDATE separately for each system by creating variants for all the plug-in connectors. Scheduling firefighter log sync for multiple connectors could cause log discrepancies in your GRC system. See also note 1994746 for best practice.

    Best Regards,

    Zoltan

    Add a comment
    10|10000 characters needed characters exceeded

Before answering

You should only submit an answer when you are proposing a solution to the poster's problem. If you want the poster to clarify the question or provide more information, please leave a comment instead, requesting additional details. When answering, please include specifics, such as step-by-step instructions, context for the solution, and links to useful resources. Also, please make sure that you answer complies with our Rules of Engagement.
You must be Logged in to submit an answer.

Up to 10 attachments (including images) can be used with a maximum of 1.0 MB each and 10.5 MB total.