Community
Application Development and Automation Discussions
Join the discussions or start your own on all things application development, including tools and APIs, programming models, and keeping your skills sharp.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Search instead for 
Did you mean: 
Read only

Track a user activity

Former Member

‎2011 Jun 26 7:16 PM

0 Likes
780

Hi All,

From our production system, around 500 scheduled jobs got deleted. We dont know how and who did it. We would like to find out who did this.

I checked with the security team and found who all were having access to delete the job. Now how can i find out who all were logged in to the production system for that particular time(i.e. yesterday) and what all transaction done by those users.

Kindly help me.

Regards

Maneesh Chandran.

Hi All,

From our production system, around 500 scheduled jobs got deleted. We dont know how and who did it. We would like to find out who did this.

I checked with the security team and found who all were having access to delete the job. Now how can i find out who all were logged in to the production system for that particular time(i.e. yesterday) and what all transaction done by those users.

Kindly help me.

Regards

Maneesh Chandran.

Reply
4 REPLIES 4
Read only

Former Member

‎2011 Jun 26 9:41 PM

0 Likes
731

Hi,

Your security team should be able to give you the requested information. If they can't then you should get a new team as this is basic stuff for them.

There are a few techniques, the stat records (ST03N) will give you a rough idea of who was logged in and some of the things that they did. If the audit log is activated (which it should be) then using SM20N you will be able to get the info in a better format than ST03N.

There could a whole load of reasons and methods that this happened but the above will get you started.

Read only

Former Member

‎2011 Jun 27 8:18 AM

0 Likes
731

Hi,

Also. you can try STAD.

Regards,

Vinod.

Read only

Former Member

‎2011 Jun 27 1:14 PM

0 Likes
731

What you are looking for is described in SAP Note 850885, but will most possibly be too late.

If you are fast enough, then you might be able to get the dynpro number from STAD, but again unlikely.

Cheers,

Julius

Read only

Former Member

‎2011 Jun 27 3:55 PM

0 Likes
731

Thanks you all for the help..