Activating Audit Logging for User-Launched Programs in the System

Let’s assume, not out of idle curiosity but due to critical business needs, you occasionally need to monitor whether a user has launched a specific program in the system. If they have, you might also want to know for what purpose, with what intentions, and with which input parameters. Fortunately, implementing this requirement is quite straightforward.

To address this need, you must:

1. Identify the technical name of the program you want to monitor
2. Add it to a configuration table
3. Enable a couple of checkboxes
4. Launch the log viewer and analyze, analyze, analyze...

For example, let’s say I need to configure audit logging for the HRUCEDT0 program.

To enable logging, add the program name to table T599R.

You can also locate the relevant node in SPRO by the table name:
IMG: Personnel Management → Human Resources Information System → Reporting → Log Report Starts

See also the note Quickly Find a Node in SPRO

Activate the Record Online checkbox if you want to log actions performed by users in dialog mode, and Protocol required at start of batch if you want to log data when the program runs in the background.

Note: The vendor recommends keeping in mind that data will only be collected for reports using the PNP Logical Database.

The amount of information collected and performance-related considerations are detailed in the help section of this SPRO node:
IMG: Personnel Management → Human Resources Information System → Reporting → Log Report Starts → Set Flow Control for the Logical PNP Database

Be sure to review this information.

Everything is now ready for testing. I’ll run the HRUCEDT0 program with some parameters.

After one or two runs, you need to launch program RPUPROTD — this is where the logs of interest will appear.

See: Log of Report Starts (Report RPUPROTD)

Double-clicking on a log entry will display the required information.

And don’t forget the old saying: just because you’re paranoid doesn’t mean they’re not watching you. Yours, ignatov.