SAP GRC 10 EAM Log Information for Change, Transactions, System, Security Audit, OS Command Logs

[Former Member]

Hi Experts,

We are experiencing some issues where some of the logs are not being collected for certain transactions. For example, change log is not populated when completing idoc edits, mass reversals, and check edits. However, change logs are being shown for vendor master changes and user master record changes. Can someone provide more background on the tables/transactions that GRC collects this information from?

• Transaction Log – captures transaction execution from transaction STAD
• Change Log – captures change log from change document objects (tables CDPOS and CDHDR)
• System Log – captures debug and replace information from transaction SM21
• Security Audit Log – captures security audit log from transaction SM20
• OS Command Log – captures changes to OS commands from transaction SM49

Is there a configuration that needs to be completed in ECC so that this information can be seen in GRC? We are running on SP13. Thanks.

Paul

[Former Member · Accepted solution]

Hi Paul,

If your ECC is getting all this data perfectly, then you doesn't require to make any additional configurations. However, most of the LOG issues happens with inconsistencies in the system time zone. If you are able to see some of the logs in GRC, then I don't think you have that issue.

Further, did you add authorization objects S_ADMIN_FCD and S_TOOLS_EX to the RFC user in the backend system?

I also recommend you to visit SAP Note # 1775432.

Regards,

Raghu Boddu