Set up custom security logs

christineha — Mon, 08 Dec 2025 19:45:19 GMT

Hello Community,

I have a request from a customer who needs to implement monitoring on the following events to comply with their internal Security requirements :

User logons and logon attempts (successful and failed)
User account modifications (creation, modification, deletion, role changes)
Access to sensitive data and critical transactions
Unauthorized access attempts (authorization failures)
System configuration and security parameter changes
Privileged user activities (administrators)

Their Security requirements are the following:

Confirmation that the Security Audit Log is enabled on their tenant with capture of critical security events
Access to the “Display Security Audit Log” Fiori application for security/audit teams
Documentation on the complete list of events captured in their Cloud edition
Ability to export these logs to enable automated security alerting and monitoring

I was advised that CAS (Cloud Application Services) could address these kind of needs but these are not for "one shot" request, CAS are indeed used for recurring activities ; I also raised a CISA request but the URL they've provided seems to be outdated.

Thanks much in advance

Re: Set up custom security logs

jude_bradley — Thu, 11 Dec 2025 11:47:45 GMT

Are you using SM20 or RSAU_READ_LOG for capturing this data?

https://community.sap.com/t5/application-development-and-automation-blog-posts/analysis-and-recommended-settings-of-the-security-audit-log-sm19-rsau/ba-p/13297094 is a good starting point.

Question Re: Set up custom security logs in Technology Q&A

Set up custom security logs

Re: Set up custom security logs