Identify which APP_USER deactivated the USER in SAP HANA SPS 2.5

[former_member565459]

Hello Team,

We've a user with gets de-activated due to too many invalid connection attempts. We need to identify as to who exactly has put in the wrong password for the user in SAP HANA. Is there any view which stores this information ?

I've checked two views but they don't store the information asked above.
florian.pfeffer can you help me with the same?

TIA.

SELECT * FROM "SYS"."INVALID_CONNECT_ATTEMPTS" WHERE USER_NAME  = 'RR_ANALYST';
Select * from "SYS"."USERS" WHERE USER_NAME  = 'RR_ANALYST';

[Cocquerel]

Do you have an audit policy to track unsuccessful connection attempts ? If not, you can run the 2 following statements to create and activate it

CREATE AUDIT POLICY "ALL_UNSUCCESSFUL_CONNECTS" AUDITING UNSUCCESSFUL CONNECT LEVEL WARNING;
ALTER AUDIT POLICY "ALL_UNSUCCESSFUL_CONNECTS" ENABLE;

Then, you can query the view SYS.AUDIT_LOG to get detailed information.