Log Report 
The Log Report shows logon events for a firefighter, a range of firefighters, a specific transaction code, or a range of transaction codes, over a defined date range. You can sort the report by the firefighter ID. It displays all owners for the Firefighter ID, as well as the latest owner who made the firefighter ID assignment.
Administrators access the Log Report through the Superuser Privilege Management Administrator’s toolbox. By default, the report executes each time the background job /VIRSA/ZVFATBAK runs.
Logging Information
Location |
Considerations |
|---|---|
Statistical Records/User Activities (STAT) |
SAP systems also log activities by transaction and user in statistical records. |
Change Documents (CDHDR) |
SAP systems capture changes with change documents (entries into the CDHDR table). |
Transactions |
All transactions that are successfully entered are reported, independent of any updates. |
Programs Executed |
If transactions SA38 and SE38 are executed and a program runs, the program name is reported, except in SAP NetWeaver 700 systems. |
How to Save the Log Report
Superuser Privilege Management saves the report into three text files: the Session Log, the Transaction Log, and the Change Log. You can save and view the report as one consolidated file, or view each of the files separately.
Structure
The report uses a tree structure to present the three types of information: Log in events, Transaction type for the logon event, and the Transaction detail.
To access detailed information for each logon event, select the plus (+) sign to the left of a line item.
Log Report Login Events
You can use the Log Report filters to view logon events. The Log Report displays transaction details and has a transaction change record associated with each logon event.
Note
To display logon events that only contain critical transactions, select the Only Critical Transactions checkbox. Critical transactions are defined in the Critical Transactions table.
The top branch of the tree structure displays the logon event and is always visible. A logon event displays the following field data:
Log in Event |
Description |
|---|---|
Firefighter ID Owner |
The user who owns the firefighter ID. |
Firefighter ID |
The ID of the firefighter. |
Firefighter |
The name of the firefighter. |
Session Date |
The session date for this logon event. |
Session Time |
The time for this logon event. |
Reason Code |
The reason code for this session. |
Transaction Types
The second level of a logon event is the transaction type. Each record represents a logon event for a firefighter ID. To display the associated information, click the plus (+) sign to the left of the logon event. The Log Report contains the following fields at the transaction type level:
Transaction Type Fields |
Description |
|---|---|
Date |
The date of the transaction. |
Time |
The time that the critical transaction occurred. |
Server Name |
The server name. |
T-code |
The code for the transaction. |
Report Name |
The report name. |
Report Title |
The report title. |
Change Log Level
The third level of information is the change log level. Each record contains details about a transaction. To display the associated change log information, select the plus (+) sign to the left of the transaction. The Log Report contains the following fields at the change log level:
Change Log Fields |
Description |
|---|---|
Time |
When the transaction was executed. |
Change Document |
The modified document that contains the change. Only transactions logged in the CDHDR/CDPOS tables contain change documents. |
Table |
The database table that contains the modification. |
Field Text |
The field that was modified. |
Old Value |
The value before it was modified. |
New Value |
The value after it was modified. |