‎2008 Jan 22 3:53 PM
Hi there, how to find out what tcodes have been used by user in the past 6 months?
‎2008 Jan 22 4:29 PM
Hi,
There are a few posts covering this in the security forum. If you use the search for keywords like:
STAD, STAT, ST03N
Then you should get a fair number of pointers
‎2008 Jan 22 4:49 PM
If activated, You can also try viewing the security audit logs via SM20 (or SM20N).
Enter your desired indicators (user id, from/to dates, etc...) and be sure to select "all audit logs" to analyze all servers.
The main disadvantages of activating and analyzing audit logs are the performance and disk space usage.
Depending on what release your company is on, you can run this in background with variants (report RSAU_SELECT_EVENTS).
If you are looking for a report to be run on a regular basis with specific indicators,
you could also write a report that extracts data to a spreadsheet, etc and run it during off-peak times.
For more info on Security Audit logs, see...
http://help.sap.com/saphelp_nw04s/helpdata/en/2c/c59d37d373243de10000009b38f8cf/frameset.htm