05-22-2009 10:49 AM
Dear Expert,
If any user account has been deleted from UME, how can I trace them to find out that when and who has deleted accout ?
Thanks - Pavel
05-22-2009 5:17 PM
Hi
'security.log' file contains log of important security events, such as successful and failed user logons, and creation or modification of users, groups and roles. You may view it from the log viewer or from the filesystem in /usr/sap/<SID>/<instance_number>/j2ee/cluster/server<X>/log/system.
Try it out and update the thread.
Ravi
05-22-2009 5:17 PM
If this is Java Only -
You can check the log at the OS level...
Should be somewhere at <j2ee root>/cluster/serverx/log/system/security/audit/<# log number>.log
Cheers
Abhishek
05-22-2009 9:02 PM
The security audit log is the correct file for such information
See:
http://help.sap.com/saphelp_nw70/helpdata/en/03/37dc4c25e4344db2935f0d502af295/frameset.htm
Edited by: Patrick Whitty on May 22, 2009 10:03 PM (typo)