SM20 - Read Security Audit Log

SAP Transaction Code - Details

• Transaction Code: SM20

  Description: Read Security Audit Log

  Release: S/4HANA and ECC 6

• • Program: RSAU_READ_LOG

    Screen: 1000

    Authorization Object:

  • Development Package: SECU

    Package Description:

    Parent Package:

  • Module/Component:

    Description:

Smart SAP Assistant

• SAP Tcode: SM20 - Read Security Audit Log

  
  Overview:
  The SAP transaction code SM20 is used to read the security audit log. This log contains information about user activities, such as logon attempts, changes to user master records, and other security-related events. The log can be used to monitor user activity and detect any suspicious activity. 
  
  Functionality: 
  The SM20 transaction code allows users to view the security audit log in a variety of ways. Users can filter the log by date, user name, or event type. They can also search for specific events or keywords. The log can be sorted by date, user name, or event type. 
  
  Step-by-step How to Use: 
  1. Enter the transaction code SM20 in the command field. 
  2. Select the desired filter criteria from the drop-down menus. 
  3. Click “Execute” to view the filtered results. 
  4. To search for specific events or keywords, enter them in the “Search” field and click “Search”. 
  5. To sort the results, click on the column header of the desired field (e.g., Date, User Name, Event Type). 
  6. To view more details about a particular event, double-click on it in the list of results. 
  7. To export the results to a file, click “Export” and select a file format (e.g., CSV). 
  
  Other Recommendations: 
  It is recommended that users regularly review the security audit log to ensure that all user activities are legitimate and authorized. Additionally, users should be aware of any suspicious activity that may be detected in the log and take appropriate action if necessary.