Skip to Content
avatar image
Former Member

issue gathering some info on a user activity.

25 days back some changes were made by one of our users in transaction code CO02 the problem is that i want to find out with which system IP address , the changes were made since we schedule the job RSTCDEL on weekly basis hence no ogs are vailable for the last 25 days is there any other way out by which we track that from which system or a IP address the changes were made although the *USER* ID with which the changes were made is known to me but unable to find the exact details.

Your help will be highly appreciated.

Add comment
10|10000 characters needed characters exceeded

  • Follow
  • Get RSS Feed

3 Answers

  • avatar image
    Former Member
    Sep 14, 2011 at 11:03 AM

    Hi,

    Option # 1 - If you have audit log enabled, you can view the IP address or Terminal #.

    Option # 2 - Ask the user on which terminal he has logged in 😊

    But, what you would like to do by tracing the IP address??

    Regards,

    Raghu

    Add comment
    10|10000 characters needed characters exceeded

    • Former Member Former Member

      If you tolerate this and dont turn your audit log on as compensation, then that is your problem.

      At most you could start a forensic investigation.

      Sorry,

      Julius

  • avatar image
    Former Member
    Sep 14, 2011 at 11:53 AM

    So what you mean to say is that you know the user ID but a multiple of people are using it - hence you need to know the terminal IP?

    Cheers,

    Julius

    Add comment
    10|10000 characters needed characters exceeded

    • Former Member Former Member

      You could start the forensics by using SM19 to gather a list of terminals subsequently using that ID.

      When the list seems complete, disable the multi_gui login parameter.

      When one of them on those terminals call you, ask them where they were 25 days ago at that time. Also verify in the document headers whether other records give you a clue. Also check the joblog and who else has S_BTCH_NAM for that user ID.

      For all the others who call you, send them a user registration form 😉

      Cheers,

      Julius

  • avatar image
    Former Member
    Oct 01, 2011 at 09:24 AM

    Thanks !

    Add comment
    10|10000 characters needed characters exceeded