SecAudit Log - rsau/enable - What does it do?

[Private_Member_19084]

Hi experts

to be honest, I am a bit confused at the moment.

I am testing and rsau/enable is off (0).

However, I did some configuration via SM19 and the audit-log did start recording.

So therefore my question is, what does the parameter exactly control?
Is it a bug, as far I understand, this should be a kind of a main-switch, shouldn't?

Kind regards

[former_member182505 · Accepted solution]

Hello Anon

rsau/enable: Set to 1 to activates audit logging and 0 to deactivte
rsau/local/file: Name and location of the audit log file
rsau/max_diskspace/local: Max. space of the audit file. If maximum size is reached auditing stops.
rsau/selection_slots: Max. number of filters

The settings are activated after the instance has been restarted.

Thanks

Sadiq

[Private_Member_19084 · Accepted solution]

Hello Sadiq,

Thank you for your help, this information I already know.

However, I think I already have the answer. rsau/enable activates the default log.

However, dynamical logs are activated always, also if rsau/enable is 0.

Kind regards

[daphneo]

I know it's an old post, but the reason is likely due to the SAP version. See note 2676384 for info on how later releases handles it.

[former_member183044]

Hi,

rsau/enable : This parameter enables the security audit logging for your system. For future also u can track the users activity if this parameter is enabled in RZ10.

Regards

Praveen

[Private_Member_19084]

I know, but 0 DOES NOT MEAN that audit log is generally off.

The dynamic one is also working with 0