USER LOGS

[Former Member]

Hi Experts...

I want to find out the users yesterday activities...

for example one of our user was misused one report and two dump occured.... i want to trace the following things...

1. terminal name (or) IP address

2. any logs available to find that, but in SM21 logs were overwrite.

Kindly help to find the this........

Thanks in advance

Regards,

Sundar.C

[Former Member]

> for example...

Is this just theoretical or did something really happen?

I could tell you where to look, but if it is only a theoretical question... then obviously you won't find anything there....

Cheers,

Julius

[Former Member]

Hi Julius..

even if its theory also appreciated....

Because i want to find the user terminal

the problem is one of our production planning user ran the HR reports..

we ask them he said not run the report ( but we found the login name)... so we need the user logs and terminal no

is it possible to find the user log

Regards,

Sundar.C

[Former Member]

What is a "dump"? => A "download" or a "runtime error"?

In the case of a runtime error, you will get this information from the Short Dump Monitor (tcode ST22).

If you mean a download, then it becomes more tricky...

Cheers,

Julius

[Former Member]

The dump is a run time error....

LOAD_PROGRAM_NOT_FOUND

because this ABAP program is incomplete in production system.

that user was trying to access this report...immediately system get the error...

we konw login name....but in that department having 12 systems (terminals). so that we have to find the

ip address, which was used this report..

in sm21 log is not having yesterday information

Regards,

Sundar.C

[Former Member]

Make sure you are reading all the logs: System Log => Choose => All remote logs.

By default you are only reading your local app server log.

Otherwise try ST22 => choose "Yesterday" (but do that today still).

Cheers,

Julius

[Former Member]

> we konw login name....but in that department having 12 systems (terminals). so that we have to find the

>

> ip address, which was used this report..

You should also rethink the design of this as one of your new year's resolutions....

[Former Member]

again i have select "all remote system log" for your suggestion. but still it gives last few hours

records...

What can i do????

Regards

Sundar.C

[Former Member]

Have you tried to search the forum here for more information while waiting for replies? I remember such questions being posted before.

Actually, the intended tool for this is SM20, but you need to have turned it on first.

Of course you need to be responsible with such data, and not misuse it for the wrong purposes and investigate properly lest you falsely accuse (for example) the end user instead of (for example) the developer

Cheers,

Julius

[Former Member]

Hi all,

I found the solution for that...

only three transaction code for using this...

SM19

SM20

SM21

Thanks for all...

Regards,

Sundar.C

[Former Member]

Hi Sundar

How did you got terminal or IP address ? I am also looking for this. In my case User ID is getting locked. Somebody is trying to guess the password & trying to get it.

In SM21 under terminal column, SAP is showing only 8 char of the IP address which is of no use.

[Former Member]

>

> How did you got terminal or IP address ? 
> 

yet...

>

>
> ...
> SM20
>....
> 
> Sundar.C