T-code:sm20 查所有server的系統(tǒng)日記
我們提供的服務(wù)有:成都網(wǎng)站設(shè)計(jì)、做網(wǎng)站、微信公眾號(hào)開發(fā)、網(wǎng)站優(yōu)化、網(wǎng)站認(rèn)證、來賓ssl等。為超過千家企事業(yè)單位解決了網(wǎng)站和推廣的問題。提供周到的售前咨詢和貼心的售后服務(wù),是有科學(xué)管理、有技術(shù)的來賓網(wǎng)站制作公司
T-code:sm21 查本機(jī)server的系統(tǒng)日記
干了壞事要消除罪證?你要把a(bǔ)udit log 和 system log 都刪掉才行
audit log 刪除
1. To access the Security Audit Log reorganization tool from the SAP standard menu,
choose Tools à Administration à Monitor à Security Audit Log à Reorganization.
The Security Audit: Delete Old Audit Logs screen appears.
2. Enter the Minimum age of files to delete (default = 30 days).
This value must be 3.
3. Activate the To all active instances indicator to delete the audit files from all application
servers. Leave the indicator blank if you only want to delete the files from the local
application server.
4. Activate the Simulation only indicator if you do not actually want to delete the files. In this
case, the action is only simulated.
5. Choose Audit Log à Continue.
但這個(gè)只能刪3天前的,如果你一定要?jiǎng)h現(xiàn)在的需要操作系統(tǒng)的權(quán)限 (操作系統(tǒng)下做動(dòng)作的話,操作系統(tǒng)也會(huì)有日志的,各系統(tǒng)設(shè)置不同,請(qǐng)自行腦補(bǔ))
audit log 在參數(shù) rsau/local/file 里決定路徑和文件名。
system log
system log 分本地log 和全局log 都要?jiǎng)h
If the syslog really should be deleted, you should first consider, that for 'n' application servers, there are 'n' syslogs, plus 1 central syslog. (The central syslog only exists if at least one machine is running UNIX.)
You need the filenames. These can be determined, for example, with the report RSPFPAR or the command 'sapparar'. The following table shows the profile variables and typical values:
rslg/central/file /usr/sap/C11/SYS/global/SLOGJ
rslg/central/old_file /usr/sap/C11/SYS/global/SLOGJO
rslg/local/file /usr/sap/C11/D01/log/SLOG01
rslg/send_daemon/status_file /usr/sap/C11/D01/data/rslgssta
R/3 must be stopped. If the operating system was not also restarted, the shared memory segment 'SCSA' may still exist. This must also be removed. Possible ways to do this are listed in note number 12715.
To delete the central syslog, both syslog files must be deleted. They are recreated automatically when the system is restarted.
To delete one of the local syslog, stop the corresponding application server and delete its SCSA. The syslog file and the small management file are then deleted. They are recreated automatically when the system is restarted.
If the locale syslog file is mistakenly deleted without the described preparation, it is recreated incorrectly. However, it can be repaired after this with the report 'RSLG0020' (note 21153).
翻滾吧,騷年
打開使用記錄。1、sap的字段和對(duì)象的修改都會(huì)保存舊值,數(shù)據(jù)保存在CDHDR和CDPOS表記錄了用戶于什么時(shí)間點(diǎn)用sap設(shè)置查看日志。