GRC 10 : EAM Logs are showing 'No Records'

[Former Member]

Hello  Experts,

I am working on GRC 10 EAM configuration at SP07.

The EAM Firefighting scenario is working on ie.Firefighter can login to backend R3 system and performed

FF activities but when i update the FF Logs GRC system doesnt show any logs in the system.

The logs are present in R3 system in STAD, CDPOS, SM20 etc.

The TIme Zones are same in both GRC and R3 system.

But Except Table GRACFFLOG.

NO other Log related table is getting updated after running log update Sync job successfully.

Please let me know if anybody has faced this issue or any advise on what is need to be checked.

Any help is much appreciated.

Regards,

Yatin Phad

[kakdechetan]

Hello,

We have stopped the firefighter log sync background jobs GRAC_SPM_LOG_SYNC_UPDATE.

Now in "Consolidated Log Report"  all system logs are just collected partially and we are not getting all firefighter logs.

Is this happened because we have stopped the jobs GRAC_SPM_LOG_SYNC_UPDATE.

Can any one help me in this.

Regards,

Chetan Kakde

[former_member185447]

Well that's the main purpose of the mentioned background job.

Any specific reason why you stopped running the synch job?

Regards

Deepak M

[former_member136769]

Hi All,

EAM log was quite unstable and unreliable in SP07.

I suggest you monitor SAP Note

1967403 - EAM: Resolving the "Invalid Log Report" error in Firefighter Log

Review reports

which lists all newest notes released with fixes to this functionality.

I strongly advise you to apply all the notes mentioned in the note,

Hope it helps,

Luciana.

[Former Member]

Hi Luciana,

I am on SP10 AC10.0, should I apply all notes given in note 1967403 which are above SP10?

BR,

Mangesh

[former_member136769]

Hi Mangesh,

Yes please, apply all notes listed for SP levels above yours. Sp09 and SP10 were quite unstable.

Let us know!

Luciana.

[Former Member]

This message was moderated.

[Former Member]

Hi,

Im using GRC 10.0 SP08. We have all the plug-ins set

1000          1              backend system RFC name

1001          0              GRC server RFC name

1090          4              SAP_GRAC_SPM_FFID

1089         1               1 (SPM application type)

The Sync job is getting executed hourly. We have implemented notes 1731923 and 1733881 to the GRC box.

But FF is not showing any information in the consolidated log also not showing any info in Session details of FF log summary report.

We opened message with SAP but no luck there too. We have all logs enable in the plug in systems.

Any help will be highly appreciated. it is right now very critical.

Regards,

MK

[Former Member]

Is the issue resolved ??

Please check in backend/plugin system if data is populated in SPAD, SM21 transactions.

Regards,

Victor

[Former Member]

Hello Victor,

Which T-Code to be used in backend/plugin system to check generated logs of FF in these systems ?

Regards,

Kapil

[chandani_kaur]

Hello All,

Can you please check the SLG1 logs on GRC box and see if there is any error. Please implement 1689445 & 1681641 Notes in plugin system.

Regards,

Chandani

[Former Member]

Hi Chandani,

we have implemented GRC 10.0 SP09 and we are facing this similar issue now.

By report "Transaction logs and Session Details" no logs are collected. In "Consolidated Log Report" the logs are just collected partially.e.g. the transactions like SA38 and SE16n are not collected in " Consolidated Log Report".

Do you have any advices about this issue?

Thank you very much.

Regards,

Ying

[Former Member]

Hi Ying,

Please implimetn the following note

1731923

1731923

Please let us know how it goes.

Thanks

Japneet

[Former Member]

Hi Japneet,

thank you very much for your reply and the note you suggested!!! It works partiially now.

I implemented the note 1731923 and 1733881. The Logs are collected in Transaction log. But if the EAM logs sync job runs while the FFIDs are been using, the Log information are still missing in the reports.

Do you have any advices for this issue?

Regards,

Ying

[Former Member]

Hi Expert,

I am facing similar problem for EAM reports which is on SP09. It is showing result for few reports while others are coming with error "No Record Found"

I am getting data in report for below:

Consolidated Log Report

Firefighter Log Summary Report

Reason Code and Activity Report

Transaction Log and Session Details

I am not getting data for below report:

Invalid Superuser Report

SOD Conflict Report for Firefighter IDs

Please let me know if this is faced by others and if there is fix for this.

Thanks & Regards,

Abhimanu Kumar Singh

[chandani_kaur]

Hello Ying,

As stated earlier also, First thing is please check SLG1 logs for the FF log update program. If there is any error, it would be available there. After that we need to check accordingly.

Thanks & Regards,

Chandani

[Former Member]

Hi Yatin,

I have a similar problem with EAM. In my case was:

1 - The permission of the user who runs the GRAC_SPM_LOG_SYNC_UPDATE job.

2 - The permission of the controller user who press the button "Sincronize logs" or something like that in the report. If this user does it, the report do not bring anything but mark the log, so you can not take back it again. For this, I modified the controller role.

I hope this help.

Regards,

[Former Member]

Hello Yatin,

Please check if logs are generated in backend/plugin system.

System Log: Captures Debug & Replace information from transaction SM21.Security Audit Log: Captures Security Audit Log from transaction SM20

OS Command Log: Captures changes to OS commands from transaction SM49

Transaction Log /Change Log/ Audit logs : SM19

Also make sure if the following settings/parameters are set in Plugin system

Parameter  Sequence Value

1000          1              backend system RFC name

1001          0              GRC server RFC name

1090          4              Z_SAP_GRAC_SPM_FFID

1089         1               1 (SPM application type)

Regards,

Victor

[Former Member]

Hello Victor,

Thanks for the reply

I am running the sync job GRAC_SPM_LOG_SYNC_UPDATE in background as i wonder will it make any  difference if i increase the job frequency  ? As i have also tried running the job in foreground after doing Firefighting activity immediately.

I have chcked the logs in R3 production system and they are getting generated. point to note that i didnt got this issue in development GRC bo with R3 development system

I have got an information that there may an issue in log collection  if there are multiple application servers in R3 system.

I have 1 application server for development R3 system and 12 application servers for production R3 system.

Any clue about this ?

regarding the Parameter setting , i am not sure we have below in GRC 10 do we ?

1000          1              backend system RFC name

1001          0              GRC server RFC name

Regards,

Yatin Phad

[Former Member]

Hello Yatin,

The parameters mentioned are to be created/set in backend (R/3 system).

Go to R/3 -->SPRO--> GRC(plugin) and there you can set them.

Also regarding multiple application servers i suppose SAP has already provided fix in SP07 .

The frequency should not actually enhance anything.

But in my suggestion you can have this job scheduled for every 30 mins .

Regards,

Victor

[Former Member]

Hello Victor,

I have build GRC development    box wih same settings as i have in GRC production,

Where i have not maintained any parameters in R3 dev system.

EAM logs are working fine with GRC development box but they are not working in GRC production.

Do you still think that i need to make parameter settings in R3 prd system to get logs in grc prd system.

Regards,

Yatin Phad

[Former Member]

Hello,

I had a similar issue in SP06. Try running the update jobs every 5 minutes instead and see if that makes a difference.

Also, which background job specifically are you running to collect the logs?

[Former Member]

Hello Kausal,

I have sechduled SYnc Job  GRAC_SPM_LOG_SYNC_UPDATE in background for log generation.

Any clue what else to check.

Regards,

Yatin Phad

[Former Member]

Hello Kaushal,

Do we Mandatory need Two RFC Connection between GRC and R/3 system for FF Los properly generated in GRC system.

Regards,

Yatin Phad