How to troubleshoot for audit log not shown in ST01

Problem:

Audit trace in "ST01" are not showing any record / insufficient of trace record.
Ex: the trace only able to track for few hours of logs.

Solution:

1) Execute TCODE: ST01, click "Goto" -> "Administration

2) The parameters shown there will be total of 10 trace files with 16MB each for the audit logging. In this case 160MB of logging space will be used and once the log reach the maximum size, it will be overwritten again. Any change to the parameters will required to click the "Activate" button or changes can be make in the profile parameters

3) Ensure sufficient space for the logging "/usr/sap/<SID>/DVEMGS10/log/TRACE

4) Select "trace components" and "general filters" for specific selection. Click "Trace On" for start the system trace.

5) The trace results click "analysis" and run "execute" 

How to troubleshoot for SAP security log missing

Problem:

When performing "SM20" audit log review and found that the users tcode activities were missing from the trace

Solution:
A) Temporary (Trace will be turn off after server restart)

1) Execute "SM19"

2) Select the "DynamicConfiguration" tab -> Select "Configuration" -> Select "Activate audit"

3) Click "Yes"

4) The trace activated successfully

5) Log file created in "/usr/sap/QAS/DVEBMGS68/log" showing the trace was started

6) With this option the only limitation will be the trace will be turn off after server restart


B) Permanent (Trace will remain on after server restart)

1) Execute "SM19" and select the "Static Configuration" tab

2) Click "Environment" -> "Profile parameter"

3) Select parameter: "rsau/enable", value 0 = trace disable, value 1 = trace enable

4) Double click "rsau/enable" to show the explanation of the parameter

5) Execute "RZ10" to change the parameter, select the instance profile

6) Select "Extended maintenance" and click "display" button

7) Click "Create Parameter" button to insert the "rsau/enable=1"

8) Once profile added and activated, try restart the server and the log tracing will be still running.

How to lock and unlock a client

There are two methods to lock and unlock a client which is locked while performing a client copy.

Steps:

Option 1: TCODE: SCC4 and cannot tick or untick the option "Locked due to client copy"

Option 2: TCODE: SE37

1) Login to the any client with "DDIC" or "SAP*" and execute SE37, enter "SCCR_UNLOCK_CLIENT" to unlock or "SCCR_LOCK_CLIENT" to lock a client. Click the "Execute" button / F8

2) Enter the client number to be unlock and click "Execute" button / F8

3) Now the option "Locked due to client copy" can be checked list

how to resolve RFC error during client copy

In rare case, administrator might experience RFC error during the client copy process.

Steps to create the RFC for client copy:

1) TCODE: SCCL and sample screen of client copy

2) Subsequent screen of the client copy

3) Error occur on the client copy

4) Login to client: 000 with DDIC or SAP* or any administration account and execute TCODE: SM59 to create a RFC connection for the source client (FINBTR@<SID>CLNT<SourceClient>)

5) Used a login account with "sap_all" in the source client and test the connection with "Remote Logon" and "Connection Test" button

6) Continue the client copy process and the error on "step 3" should be resolve

How to create a new menu node on SAP

Steps to create a new menu node that attached to a customized TCODE ...

Steps:

1)  Execute TCODE: SE43 and enter the menu name to create a new node

2) Click the "Extend" button.

3) double click on the relevant "Report Menu"

4) Select the sub node to be create and click on the "Add Entry at Same Level' button.

5) Enter the descriptions and the customized TCODE to be shown.

6) Create the new transport request.

7) New Menu item created

8) The new node appear in the menu.

9) Double click to execute the program / TCODE.

* To delete the node
1) Access the SE43 as shown above and select the node to be delete.

2) Click the "Yes" button.

3) The node been removed.

How to create a customized TCODE on SAP

In this example, we'll create a customized TCODE that will be running for a customized program...

Steps:

1) Execute TCODE: SE93 and click the "Create" button

2) Enter a new TCODE and the Description for it. Select "report transaction".

3) Choose or enter the customized program.

4) Select or enter the package (ex: ZHR) and click "Save" button.

5) Generate the transport request. Click the new button.

6) Enter the relevant transport request descriptions.

7) The request created successfully.

8) The new customized TCODE created successfully.

9) Execute the new TCODE: ZTEST1

10) The customized program executed successfully.