users activity logs for a certain period of time

[Former Member]

Hi All,

Pls let me know if i can get all the users activity logs for a certain period of time?

Eg : An user XXXXX viewed some sensitive information of the other employee in infotypes like 0002, 0008. Can i see the track of information what the user XXXXX has seen? It will be helpful if i know some technical information like what screens he/she has browsed ?

Thanks

Shyam

[Former Member]

You can see what transactions were ran by using ST03N

There is no way of seeing what data users have viewed

[Former Member]

Thanks Alex.

I got the answer.Pls go through it, if it helps.

Table SGOSHIST contains the records viewed by any user.

SAP menu path System>Object history

To enable or disable object history tracking for a user, R/3 uses the user parameter SOBJHIST. When a user selects the “switch on/off object history” option, SAP inserts the SOBJHIST user parameter in that user’s own user profile. A parameter value of X is inserted to disable object tracking, while a blank entry in the parameter indicates tracking is active. Users can also change this user parameter if they have access to change their own user profile via transaction SU3.

Thanks

Shyam

[Former Member]

Interesting, this looks like it is HR specific. Thanks for sharing!

It's a bit concerning that something this useful is switched via a PID.

Cheers

Alex

[Former Member]

Hi Alex,

I tried it out today. It is not just HR specific. It is all over the place.

It appears as if the system writes an entry whenever a validation of the record selected for either display or editing is performed. E.g. when hitting "Enter" in FB03, you will be informed whether the record exists or not.

You won't find report names selected in SE38, because when entering a nonsense report name hitting "Enter", the system does nothing (yet).

Useful indeed... but I would think that it only has coincidental audit / forensic usefulness and is not a required or perhaps even intended one. So either the user or the programmer can choose whether a log should be kept (e.g. during fast processing of lots of records by a certain user or certain program) and PIDs are often chosen to do that.

Though that does make a useful feature incomplete, prevention is still better than cure...

Cheers,

Julius

[former_member66888]

This is an interesting feature. Thanks for sharing.

However, the requirement in the original question was to track even the infotypes that a user viewed. The object history does show the employee numbers accessed but not which infotypes were displayed. Any clue if this is achievable?

Also, for how many days is the transaction history retained?

thanks

Zubair

[Former Member]

I think it is only for fields with memory IDs assigned to them so that the system knows which field the value belongs to. Not 100% sure on that though because you can hit backspace to get the list.

F1 the field -> technical information (you should be it as a PID ID here already) or double-click the data element and go to "Further characteristics".

I am curious now as well...

Cheers,

Julius

[Former Member]

Got the absoulte answer from Ravikumar Gurumoorthy in HCM forum. Hence marking the Question as answered.

[Former Member]

Thanks Shyam, I didnt know that.

Cheers,

Julius

[vijaybhaskarraju_vegesana]

Hi Shyam,

I am facing the same issue, Suppose in a articular session, if i executed multiple transactions how to analyze the start ttime and end time of a articular transaction.

I am using STAD transaction and RFM SAPL_GET_STATRECS_FRAME.