Dynamic Security Audit Log filesize

[peter_strauss]

Hello,

We have the following parameters set

rsau/max_diskspace/local 20M

rsau/max_diskspace/per_day 0

rsau/max_diskspace/per_file 0

If I look in the DynamicConfiguration tab, it shows

Maximum File Size 100,000 MB

This seems a little crazy. Does anyone have any idea how the Max File Size got to be displayed so large?

Kind regards,

Peter

[JPReyes · Accepted solution]

Hi Peter

rsau/max_diskspace_local or rsau/max_diskspace/local (depending on your SAP version) specifies the maximum length of the audit log by default is set to 1000000 bytes but it can be set much larger than that so I think you shoulc check tha current value of the parameter.

Regards

Juan

[peter_strauss · Accepted solution]

I already gave the current parameter settings...

The most interesting thing to me is that in SM19 it shows the current file size as 17,578 KB, but the actual file size at the operating system is only 17 KB. The display is off by a factor of 1000.

[JPReyes · Accepted solution]

Mine is exactly the same. maybe its just a programing typo....

Regards

Juan

[peter_strauss · Accepted solution]

Cool. Thanks for your help. It's the kind of thing you'd expect to find a note about somewhere. Anyway, I'm satisfied that my filesystem isn't going to fill up in a hurry.

[JPReyes · Accepted solution]

I have been running that for years without issues... also you can do a cleanup via SM18.

Regards

Juan

[Former Member]

Refer to SAP Note : 909734 - SecAudit: Parameter rsau/max_diskspace/local too small

-

---

As of kernel patch 2113 (4.6D) or 88 (6.40), the system requires a minimum size of 1 megabyte (1048576) for 4.6D, and a minimum size of 10 megabytes (10485760) for 6.40. As of kernel patch 134 (6.40), rsau/max_diskspace/local requires a minimum of 100 megabyte.

-

---

[peter_strauss]

Actually, I just checked at the OS level after activing the trace and logging in a few times.

The "Current File Size" shows as 10,156, but at the OS I can see that the size is only 10400 bytes.

Looks like the display is out of whack