Defining Configurations in Read Access Logging

How to log read access to data.

1. In Read Access Logging manager (transaction code SRALMANAGER), on the Administration tab, choose Configuration.

   You can search for existing configurations, create new ones, edit, and delete them here.

2. Choose the Channel for the new configuration.
3. To create a new configuration, choose Create. To edit an existing configuration, use the selection criteria to search for a configuration and then choose the (Edit) icon.
4. Depending on the channel, select the object you want to create a configuration for.

   For example, an operation for a Web Service, a function module for an RFC, or an application for a Web Dynpro.

   For more information, see Channel-Specific Configuration Information.

5. Choose Create
6. For Dynpro and Web Dynpro, you can specify a Log Context.
7. Under Log Groups, choose the Create icon to create a new log group.
8. Specify a name, a logging purpose, and a description for the log group.
9. Choose Create.

   (If you want, you can change the logging purpose and description later.)

10. Specify the fields that you want to log together in the log group.

    The fields available for the configuration are listed in the Field list pane. Drag and drop the fields to the log group.

11. For each field, specify how it should be logged. You can also specify these attributes for more than one field simultaneously, if you select more fields and choose the Edit button above the field list.

    • The Logging Type determines if the field name only is logged (if accessed), or if the value of that field is also logged .

    • By selecting the Exclude if Initial checkbox, the field is not logged if its value is initial, in order to save space in the database.

      Note The initial value is not the default value, but the technical initial value. For example, the empty value for string or character based fields or the number zero for integers. The default value will be logged in any case.
      Note If you activate this setting, and all fields within a Web service, RFC, or Web Dynpro UI are initial, no log entry is created for any of the fields.

    • For Dynpro and Web Dynpro, specify the Field Type, which is whether the field is an input field, an output (display) field, or both.

    Note Values for password fields cannot be included in logs. The Logging Type is Without Value and cannot be changed
12. Under Conditions choose the icon to create a new one (optional).

    If you do not assign any conditions, select the Without Condition checkbox in the log group attributes and continue with step 19.

13. Specify a name and a description for the condition.
14. Create one or more expressions.

    Under Expressions, choose Create.

    Expressions are joined using the logical and conjunction.

15. Specify a name for the expression.
16. Specify the fields that you want to define rules for.

    Drag and drop fields from the list in the bottom left-hand pane. You can also right-click a field and select Add Field to Expression and select the correct expression.

17. For each field, specify the select option (the selection criteria).

    For example, Username Inclusive Equals John Smith.

    Select options are joined using the logical or conjunction.

18. Assign conditions to a log group or select the Without Condition checkbox for the log group to be logged without conditions.

    To assign a condition, select the Log Group, choose Assign Condition and select a condition. Activate the assignment if you want to apply the condition to the log group. Neither log groups nor conditions must be activated, however.

19. Save the configuration by selecting Save and Activate or Save and Deactivate in the menu.

    You can also check the configuration for consistency and functions.