RE: [sap-security] What does Firefighter actually log?
Posted by
Admin at
|
Share this post:
|
|
0 Comments
 | Posted by Lee Allen (Senior Lead Analyst) on May 3 at 12:31 PM |  Mark as helpful |
That's my read as well. It's not perfect, but light years ahead of what used to be. Opportunities do exist for some custom ABAP code from the audit logs depending on the details being logged, but from your question I didn't get the impression you had a very large budget to work with. Happy hunting.
Warm regards,
The information transmitted is intended solely for the individual(s) or entity to whom it is addressed and may contain confidential and/or privileged material. Any review, retransmission, dissemination or other use of or taking action in reliance upon this information by persons other than the intended recipient is prohibited. If you have received this email in error please contact the sender and delete the material from any computer.
From: Jerry_Ake via sap-security [mailto:sap-security@Groups.ITtoolbox.com]
Sent: Monday, May 03, 2010 11:27 AM
To: Lee Allen
Subject: RE:[sap-security] What does Firefighter actually log?
Posted by Jerry_Ake (Audit Project Leader)
on May 3 at 11:26 AM Mark as helpful
Thanks, Lee, especially for the link. Info in the link says Firefighter will send an email indicating not only the reason the id was used and the activity of the id, "but also includes all the transactions you executed while in the firefighter role. The system will also display Change details for transactions that the SAP Change Header table tracks." If this is the case, then the IT folks are indeed correct that FF doesn't actually log detailed events. However, if i interpret this correctly, FF does extract the detailed info from the Change Header table and report it??
---------------Original Message---------------
From: Jerry_Ake
Sent: Monday, May 03, 2010 9:22 AM
Subject: What does Firefighter actually log?
> Good day, gurus! My research says that Superuser Privilege Mgmt (Firefighter) will log every activity the FireFighter id performs. Our IT folks say FireFighter will log the transaction used, but not what was done with the transaction. Can you resolve this discrepancy, please? Does/can FireFighter log the details of what the id actually did when using a transaction? Thank you.
__.____._ Warm regards,
The information transmitted is intended solely for the individual(s) or entity to whom it is addressed and may contain confidential and/or privileged material. Any review, retransmission, dissemination or other use of or taking action in reliance upon this information by persons other than the intended recipient is prohibited. If you have received this email in error please contact the sender and delete the material from any computer.
From: Jerry_Ake via sap-security [mailto:sap-security@Groups.ITtoolbox.com]
Sent: Monday, May 03, 2010 11:27 AM
To: Lee Allen
Subject: RE:[sap-security] What does Firefighter actually log?
Posted by Jerry_Ake (Audit Project Leader)
on May 3 at 11:26 AM Mark as helpful
Thanks, Lee, especially for the link. Info in the link says Firefighter will send an email indicating not only the reason the id was used and the activity of the id, "but also includes all the transactions you executed while in the firefighter role. The system will also display Change details for transactions that the SAP Change Header table tracks." If this is the case, then the IT folks are indeed correct that FF doesn't actually log detailed events. However, if i interpret this correctly, FF does extract the detailed info from the Change Header table and report it??
---------------Original Message---------------
From: Jerry_Ake
Sent: Monday, May 03, 2010 9:22 AM
Subject: What does Firefighter actually log?
> Good day, gurus! My research says that Superuser Privilege Mgmt (Firefighter) will log every activity the FireFighter id performs. Our IT folks say FireFighter will log the transaction used, but not what was done with the transaction. Can you resolve this discrepancy, please? Does/can FireFighter log the details of what the id actually did when using a transaction? Thank you.
Copyright © 2010 Toolbox.com and message author.
Toolbox.com 4343 N. Scottsdale Road Suite 280, Scottsdale, AZ 85251
Toolbox.com 4343 N. Scottsdale Road Suite 280, Scottsdale, AZ 85251
Related Content
In the Spotlight
White Papers
In the Spotlight
Your SAP Security is at Risk...Learn How to Stay Protected. Read the free white paper from SenSage
View this thread online
Manage group e-mails
Create an FAQ on this topic
Tell us what you think
Unsubscribe from discussion
Manage group e-mails
Create an FAQ on this topic
Tell us what you think
Unsubscribe from discussion
_.____.__ 
