function module execution log

[Former Member]

Hi Experts,

Is it possible to provide a list of all executions of function modules and the users who executed those function modules for a particular duration of time?

Thanks

Ranjan

[kiran_k8]

Ranjan,

1.Users will not be having access to SE37.

2.There are many standard FM's which have authorisation Checks and authorization checks can be implemented even in Custom FMs.

3. There many programs which will be calling many FMs.I don't see any point in having a log for all the FMs.

4. As a starting point,may be you can get the list of Users who has access to SE37.

But still,I am curious what info/decision you are going to derive from that.

K.Kiran.

[Phillip_Morgan]

Hi,

See if this can help: 539978 - Automatic generation of BAPI test data directory

This is a system embedded in some standard BAPIs to record the executions in the test data directory of the BAPI. It is possible to implement the system in custom function modules as well. It is usually used for functions called from remote systems for easier troubleshooting and reproduction of the execution.

Cheers,

[horst_keller]

Coverage Analyzer, TA SCOV?

[matt]

Or in production - UPL (aka SCOV-lite)?

[kiran_k8]

Seems,SAP has got everything under trace.

Thanks for sharing the info-Horst/Matt.

K.Kiran.

[Former Member]

Hello Horst,

Please guide me the steps to see function module execution log in SAP prod system. IN SCOV I dont find any.

[matt]

There are blogs and articles about SCOV. And UPL is well documented too. Have you tried searching for documentation?

[matt]

You have to switch UPL/SCOV on and run for a while to get useful data. They're not on by default, so there's no chance of getting historical data.

[Capps]

Your question is broad in nature, but for some situations the answer is "YES" and for others "it depends."

It depends on the version of the kernel that you are using and the system parameters.

It also depends on what users you are wanting to analyze? Dialog users or RFC users?

RFC users have multiple options from a previously Z custom program provided by SAP to read function module executions by user. Later SAP has replaced this with standard transaction STRRFCTRACE. Since NetWeaver 7.4 SAP changed the behavior slightly again. Previously the data was collected without activating a user parameter specifically for this purpose. Now it is controlled through the UCON connectivity functionality.

For more than a decade SAP has provided functionality to remediate poorly designed RFC connections and to close the security risks from assigning all function modules or all functions within a function group. For more details, check out this note:

2080378 - STRFCTRACE: Evaluation of RFC statistic records

There are also a blog I wrote previously and one from Frank Bucholz for identifying and remediating RFC function module use.