cancel
Showing results for 
Search instead for 
Did you mean: 

Auditing direct access to SAP tables

Former Member
0 Kudos

Hello,

We have been tasked with figuring out a way to audit direct updates to SAP tables directly from the i5/OS. This would be direct updates using the SQLUTIL utility or the STRSQL utility or some other utility. We need to find the who, what, where questions of how that object was updated.

In doing some research on this we have found the DSPJRN command will probably give us the information we need, but this probably isn't going to be practical to run monthly or weekly since there are a lot of entries to go through in the DSPJRN command. We are just interested in the entries that come from directly on the OS and not from the SAP system.

Has anyone done this either with the DSPJRN command or another method? Are there third party products for the i5/OS that could catch these actions and report off of them?

Thanks,

Dale Dingmann

Accepted Solutions (1)

Accepted Solutions (1)

Former Member
0 Kudos

Hi Dale,

I would say, you are in pretty bad luck with your request ...

You could try and limit the access to the DB and perhaps alow this with green screen only and start strcpyscn or similar. But, if you really want to chatch ALL updates indpendent how they occur, you need the journal - there is no doupt !

As I do expect, that you are having ASCII or Unicode, the DB tables are Unicode => it is not too easy to read the journal contents and you are not allowed to use "minentdta" - other wise the "nearly rubbish" is even compressed and totally unreadable. So, you need to scan all journals - in my eyes on a daily basis every night as otherwise the journal receivers will become too large.

Then you can skip everything with sidnn and WPnn (but even here you have to check, that "not I logon with the "special screen called WP03 and the known user sidnn !!!) (you should be pretty save with the program QSQPRECED (or similar)).

Then you know at least the row number of the manual updates ... to get to the readable data you need to think a bit more how you can either display unicode or convert unicode to latin 1 (for english e.g.)

I would say:

Good luck with this great job !!!

Regards

Volker Gueldenpfennig, consolut international ag

http://www.consolut.net - http://www.4soi.de - http://www.easymarketplace.de

Answers (0)