UME Logging and Monitoring 

The User Management Engine (UME) provides security logging which logs important security events such as successful and failed user logons, changes to users, user accounts, roles, and groups.

The following files contain the relevant logs and traces for important security events:

Security Logging

Location in Log Viewer: ./log/system/security.log

Location in file system: /usr/sap/<SID>/<instance_number>/j2ee/cluster/server<X>/log/system/security.log

This file contains a log of important security events, such as successful and failed user logons, and creation or modification of users, groups and roles.

Security Tracing

Location in Log Viewer: ./log/defaultTrace.trc

Location in file system:

/usr/sap/<SID>/<instance_number>/j2ee/cluster/server<X>/log/defaultTrace.trc

This file contains all the trace information for the whole server and includes trace information for UME libraries and the UME Provider (com.sap.security.core.ume.service). The information in this file is very detailed and is mainly required by the SAP support team. Therefore, the security tracing includes exceptions, warnings, and debugging information.

The information in these files is accessible from the Log Viewer service in the Visual Administrator tool. In addition, the Security Provider service in the Visual Administrator tool allows you to monitor user logons and user sessions on the J2EE Engine.

 

See also:

Supportability and Performance Management in the Administration Manual