SM19 - Security Audit Log

[former_member759680]

Hello,

I have activated Security Audit Log through SM19.

When I check the Parameters, I can see

rsau/max_diskspace/local = 20M

(Maximum space for security audit file)

1. My question is if the collective size of security Audit files exceeds 20M, which file will SAP delete? or rather what is the exact course of action that SAP would take?

2. In my system, Parameter rsau/enable = 0 (Enable Security Audit)

But still the audit logs are getting generated.

So does '0' signify Enabled?

Thanks.

[l_borsboom]

I think your answer can be found in [this thread|;

Kind regards,

Lodewijk

[former_member759680]

Part 2 is still not answered.

2. In my system, Parameter rsau/enable = 0 (Enable Security Audit)

But still the audit logs are getting generated.

So does '0' signify Enabled?

[Former Member]

1 = enabled

Check the parameter for all app server profiles, it's possible that you have removed it from the DEFAULT profile but is still on an instance profile, hence still logging

[Former Member]

It is also possible to activate dynamic filters in SM19, without a restart being required nor the rsau/enable being active.

This sounds like a likely cause.

Cheers,

Julius

[former_member759680]

Thanks everyone