Single Firefighter Workflow not completing

[Former Member]

Hello SAP Community,

We have been working on an issue for 3 weeks on workflow's not being sent correctly.  The strange thing is, we are getting most of our FFID workflow's to complete, but we are still missing a set that came from 4 Firefighter ID's.  The user is able to request, get approved, and use the FFID.  The Firefighter Logs are there, but when we search for them, the Controller logs are not appearing.  Remember that this is only for some FFID's and not all.

We have tried running the Timebased Sync program, when we generate it says logs were found, workflow's generated. Again nothing in the controller logs.  When we run it again, same number, and same result.

GRC Specs:

GRC 10.0 SP14

Notes implemented:

#2017105 - GRC EAM : EAM log review workflows should be sent for blank firefighter sessions as well

#2060165 - GRC EAM: Some of the firefighter log review workflows are not being generated

#2013288 - Firefighter log review Workflows is not getting generated sometime

[FilipGRC]

Hi Terrance,

are you using more then one application server where FF ID are doing log on? Those 4 EAM accounts maybe assigned to different log-on group and are being log in to server were audit logs are not enabled for example or are not gathered to GRC server.

Filip

[Former Member]

Filip,

We have one GRC Application Server and 6 ECC Production Servers.  If the audit logs were turned off, we shouldn't see the Firefighter ID Transaction logs correct?

[FilipGRC]

Hi Terrance,

having one GRC Application does not matter, however if you have 6 ECC servers, depending where your FF have log in (on which)  during FF session - logs will be capture somewhere else.

Next when you do your synchronization between GRC and ECC - you execute RFC call - which also hit some app servers, and possible root cause is that those 4 users (4 FF accounts) have loged to server which is outside of the group/ list. Check with basis team serwer logon groups.

This is one by one:

- you need to capture logs on ECC side - you need to see them there for example in SM20

- execute EAM sync jobs

- now you need see them on GRC side (consolidated log) if you not see them on GRC side this means logs were not imported from ECC and you will never see them on Controler WF logs

Check also Notes for time application and GRC server TIME differences as this is popular issue with missing logs. Check those two notes:

1773855 - EAM10.0 Sometimes Workflows and transaction logs are missed

1731923 - EAM:Transaction Logs are not being captured while sync

Filip