SPM log - very detailed report

[Former Member]

Hi,

Currently, SPM log report tells transactions that are used by firefighters, but I'm looking for very detailed report. If a firefigher check out FF id, and

go to STMS, and import a transport, need to know the transport# or,

go to SE16, and see some table entries, need to know the table name and actions performed, or

go to SUIM and change some user master data or, need to know the user-name and values changed, or

go to VA01 and creates a sales order, need to know the sales order#.

Is it possible to get this kind of very detailed report - SPM log.

We are using GRC SPM 5.3 sp11.

Thanks

Laks

[Former Member]

Hi Laks,

Just to make sure, you've clicked on "Log Report" in SPM, then once the report was displayed, you then clicked on the "Display Detailed Report" icon (magnifying glass) at the top right-hand corner of the screen?

FF pulls data from the STAT file and from tables CDHDR and CDPOS (change log history). If the transport details are not stored in these table, it's possile that you might not have all data recorded.

Best regards, Dylan

[Former Member]

Hi Dylan,

I'm referring to Display detailed option for Lop report in SPM. This gives some change information but not everything. For example, if firefighter check out FF id and perform changes to a sales orders, Log report displays order# and values that are changed., where as if creates a sales order, order# does not shows in Log report.

Regards,

Laks

[sunny_pahuja2]

Hi,

Please check SAP Note 1394281 - Superuser Privilege Management Log Report Content for what will be recorded in FF logs.

Thanks

Sunny

[Former Member]

Hi Laks,

It is a limitation in the log report. Please request for a enhancement with SAP GRC support.

Kind Regards,

Srinivasan

[Former Member]

Hi

The change logs will only appear for changes held in the CDHDR and CDPOS tables. There will be some gaps in the logging capabilities for some administrator functions as well as for custom developments so you should be aware of this when reviewing the SPM log reports.

Simon

[Former Member]

Hi,

Thanks for your inputs, seems like everything from CDHDR and CDPOS is not captured.

Reason for looking detailed log because the way we are using FF application. We approve & provision firefighter role through CUP, so that firefighters can check out any FF id's that are with full access(SAP_ALL).

So we want to track detailed log so to ensure no untoward incident happend.

Thanks

Laks