Can anybody tell me how can we see the log file of users activity in ther server ? If the server is restarted , then can we find the users activity before the server restarts ?
after activating security audit using SM19 it's writes user activity trace in log file ,so you can find user activity date wise by displaying log file using SM20
Can we find which user deleted which object in the logfile ?
No, security audit report gives you following information
-> user logon, logoff date and time
-> tcode / report run by user
->log releated to user master changed ( i.e user lock/unlock, password change, user deletion etc)
due to system restriction user can not delete any object in QAS or PRD system.
if user is going to delete any object ( customer specific object z or y ) the delete request is generated in DEV system , from that request you can identify user id.
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.