User Activity trace

[Former Member]

Hi Experts,

We have ECC6.0 installed in our organization, and now we want to find out the below points-

1. Report on what time which users logged into the system.

2. What are the t-codes or transaction they have executed in the system

3. How much time they worked into the system and how much time they were idle in the system

I want a cosolidated report from the system on the above points. Please give some solution on this

Regards,

Sudip

[sunny_pahuja2]

Hi,

You can do this with following method:

1) Take trace of user thorugh ST01 .

2) With SM20 take audit logs ,You will get whole user activity about user.

Thanks

Sunny

[Former Member]

Hi Sunny,

Thanks for the reply. ST01 is trace on user authorization check which doesn't fullfill my requirement. And sm20 I want to know how to configure it in the system in detailed steps. I hope it is configured using SM19.

So, if you have any detailed steps for configuring this and which full fills my requirement then please let me know

Regards.

Sudip

[JPReyes]

The config for the Security audit logs is available in help.sap.com

Regards

Juan

[naveen_kumar1]

Hi ,

Please have a quick look at the note 368048 which explains why the terminal ids are blank in some cases and gives the solutions where applicable.

If you want to see the current workstation with IP Addresses you can have a look at table USR41 which contains this information but this is not contained within the security audit log.

539404 FAQ: Answers to questions about the Security Audit

39418 Logging user actions

To trace user's IP, you might need to get user's Terminal ID from STAT/AL08 and manually use tracert in MS-DOS command to see particular user's IP. EG:tracert myl5005500.

Tracing route to <hostname>http://10.10.10.10

over a maximum of 30 hops:

1 <1 ms <1 ms <1 ms <FQDN> http://10.10.10.10

Trace complete.

If you want to trace the users data for few months then check USR02 table.

You can set up a abap query to run against table USR02 which will show you the last log on dates or even history it will also allow you to download it to a spreadsheet.

The report RSUSR200 is very much useful for you.

Regards,

Naveen.

[Former Member]

Hi Juan,

I searched a lot in the help.sap.com but I haven't found the exact security configuration guide which full fills my requirement.

Can you or anybody send me that exact link of the guide, so that it will help me a lot

Regards.

Sudip

[Former Member]

Hi Juan,
> 
> I searched a lot in the help.sap.com but I haven't found the exact security configuration guide which full fills my requirement.
> Can you or anybody send me that exact link of the guide, so that it will help me a lot
> 
> Regards.
> Sudip

Hi Sudip,

Just in case you haven't browsed it yet -

http://help.sap.com/printdocu/core/Print46c/en/data/pdf/BCCSTADM/BCCSTSAL.pdf

Thanks

[Former Member]

solved