SAP Reports / Programs
RSAU_SELECT_EVENTS SAP ABAP Report - Selection of Audit Events from the Audit Files (Background Variant)
RSAU_SELECT_EVENTS is a standard Executable ABAP Report available within your SAP system (depending on your version and release level). It is used for Analysis of the Security Audit Log You can use this report to evaluate files of the Security Audit Log in accordance with the familiar characteristics...see full standard documentation available for this report. Also check out the submitted Comments related to this SAP report and the details below to see which OBJECTS it interacts with such as TABLES, FUNCTION MODULES, INCLUDES ETC.
If you would like to execute this report or see the full code listing simply enter RSAU_SELECT_EVENTS into the relevant SAP transactions such as SE38 or SE80
ABAP code to call this SAP report using the submit statement
This report can be called from another progam/report simply by using the ABAP SUBMIT statement, see below for example ABAP code snipts of how to do this.
SUBMIT RSAU_SELECT_EVENTS. "Basic submit
SUBMIT RSAU_SELECT_EVENTS AND RETURN. "Return to original report after report execution complete
SUBMIT RSAU_SELECT_EVENTS VIA SELECTION-SCREEN. "Display selection screen of submitted report to user
See more syntax options for the ABAP SUBMIT statement
Text pool values
Selection Text: EVENTS = Events (Audit Messages)
Selection Text: HIGH = Only Critical
Selection Text: LOGON = Dialog Logon
Selection Text: LOW = Every
Selection Text: MEDIUM = Severe and Critical
Selection Text: MISC = Other Events
Selection Text: PONLYEOL = List End Only When Printing
Selection Text: PONLYTOP = Page Start Only When Printing
Selection Text: REPSTART = Report Start
Selection Text: RFCSTART = RFC Call
Selection Text: RLOGON = RFC/CPIC Logon
Selection Text: SYSTEM = System Events
Selection Text: S_ALVCLA = ALV Classic
Selection Text: S_ALVGRD = ALV Grid
Selection Text: S_AUDIR = Name of the Audit Directory
Selection Text: S_AUFN = Name of the Audit File
Selection Text: USER = D .
Selection Text: TERMINAL = D .
Selection Text: TCODE = D .
Selection Text: S_VARI = D .
Selection Text: STRTTIME = D .
Selection Text: STRTDATE = D .
Selection Text: SERVER = D .
Selection Text: REPORT = D .
Selection Text: ENDTIME = D .
Selection Text: ENDDATE = D .
Selection Text: CLIENT = D .
Selection Text: USERMGM = User Master Changes
Selection Text: TASTART = Transaction Start
Selection Text: S_TEXT = Text in the Message
Selection Text: S_NODUP = Compression
Selection Text: S_NOCOLO = No Colors
Title: Selection of Audit Events from the Audit Files (Background Variant)
Text Symbol: 074 = Events (Audit Messages)
Text Symbol: 073 = All
Text Symbol: 072 = Severe and Critical
Text Symbol: 071 = Only Critical
Text Symbol: 070 = Max. No. of Entries
Text Symbol: 069 = Open Error
Text Symbol: 068 = System Events
Text Symbol: 067 = Other Events
Text Symbol: 066 = User Master Changes
Text Symbol: 065 = Report Start
Text Symbol: 064 = Transaction Start
Text Symbol: 063 = RFC Call
Text Symbol: 062 = RFC/CPIC Logon
Text Symbol: 081 = ALV Classic
Text Symbol: 082 = ALV Grid
Text Symbol: 083 = Layout
Text Symbol: 084 = No Colors
Text Symbol: 085 = Page Start Only When Printing
Text Symbol: 086 = List End Only When Printing
Text Symbol: 087 = Compression
Text Symbol: 088 = Period Requested
Text Symbol: 090 = System
Text Symbol: 091 = Security Audit Log - Detail View
Text Symbol: 100 = Low
Text Symbol: 101 = Medium
Text Symbol: 102 = High
Text Symbol: 061 = Dialog Logon
Text Symbol: 030 = Critical Events
Text Symbol: 029 = Event
Text Symbol: 028 = No
Text Symbol: 027 = Yes
Text Symbol: 026 = Errors have occurred
Text Symbol: 025 = Selected
Text Symbol: 024 = Read
Text Symbol: 023 = Optional: Archive Audit Files
Text Symbol: 022 = Analysis of Security Audit Log
Text Symbol: 021 = Error Message
Text Symbol: 020 = Error Type
Text Symbol: 019 = Server Instance
Text Symbol: 018 = Security Level
Text Symbol: 017 = Audit Class
Text Symbol: 016 = Audit Log Message Text
Text Symbol: 015 = Time
Text Symbol: 014 = Date/Time
Text Symbol: 013 = Date
Text Symbol: 012 = No Object Could Be Found
Text Symbol: 011 = Server
Text Symbol: 010 = Period Selected
Text Symbol: 008 = Display Options
Text Symbol: 007 = Selection by Individual Events
Text Symbol: 006 = Events
Text Symbol: 005 = Audit Classes
Text Symbol: 004 = Standard Selections
Text Symbol: 003 = To Date/Time
Text Symbol: 002 = From Date/Time
Text Symbol: 001 = Time Restrictions
Text Symbol: 031 = Severe Events
Text Symbol: 060 = Complete
Text Symbol: 059 = Text in the Message
Text Symbol: 058 = Program
Text Symbol: 057 = Transaction Code
Text Symbol: 056 = Terminal
Text Symbol: 055 = User
Text Symbol: 054 = Client
Text Symbol: 053 = Instance Name
Text Symbol: 052 = Name of the Audit File
Text Symbol: 051 = Audit Directory Name
Text Symbol: 050 = File Empty
Text Symbol: 049 = Status
Text Symbol: 048 = Size
Text Symbol: 047 = File Size
Text Symbol: 046 = Selected Records
Text Symbol: 045 = Records Read
Text Symbol: 044 = Note
Text Symbol: 043 = Type
Text Symbol: 042 = Task Type
Text Symbol: 041 = WP
Text Symbol: 040 = Work Process
Text Symbol: 039 =
Text Symbol: 038 = Multiple messages are suppressed
Text Symbol: 037 = Compression
Text Symbol: 036 = Statistics for Analyzed Audit Log Files
Text Symbol: 035 = No Active RFC Destination
Text Symbol: 034 = RFC Communication Error
Text Symbol: 033 = RFC System Error
Text Symbol: 032 = Other Events
INCLUDES used within this REPORT RSAU_SELECT_EVENTS
INCLUDE RSAUCONSTANTS.
INCLUDE RSAU_SELECT_EVENTS_DATA.
TABLES used within REPORT and the associated SELECT statement:
No SAP DATABASE tables are accessed within this REPORT code!
Function Modules used within report and the associated call statement:
DOCU_CALL CALL FUNCTION 'DOCU_CALL' EXPORTING displ_mode = c_docu_displ_mode " Nice output processing displ = 'X' " Display only id = 'DT' " text within dialog langu = sy-langu object = 'BC_SECU_AU_DOCU_EVENTS' typ = 'E'. " Docu type: user
DOCU_CALL CALL FUNCTION 'DOCU_CALL' EXPORTING displ_mode = c_docu_displ_mode " Nice output processing displ = 'X' " Display only id = 'DT' " text within dialog langu = sy-langu object = 'BC_SECU_AU_DOCU_SEARCHTEXT' typ = 'E'. " Docu type: user
RSLG_SEL_DUMP CALL FUNCTION 'RSLG_SEL_DUMP' IMPORTING itself = ls_rslgsel.
RSLG_SEL_DUMP CALL FUNCTION 'RSLG_SEL_DUMP' IMPORTING itself = ta.
RSAU_SEL_DUMP CALL FUNCTION 'RSAU_SEL_DUMP' IMPORTING itself = ta_audit.
RSAU_READ_FILE CALL FUNCTION 'RSAU_READ_FILE' DESTINATION ls_all_dests-rfcdest EXPORTING selection = ta selection_audit = ta_audit file_no_old = file_no IMPORTING end_reason = end_reason end_info = end_info counters = l_recordcnt file_no_new = file_no TABLES syslog_in_table = it_entriestab_2 audit_file_stat = audit_file_stat_rfc EXCEPTIONS system_failure = 2 MESSAGE last_rfc_mess communication_failure = 3 MESSAGE last_rfc_mess.
RFC_GET_LOCAL_DESTINATIONS CALL FUNCTION 'RFC_GET_LOCAL_DESTINATIONS' EXPORTING consistency_check = '' TABLES localdest = lt_local_dests EXCEPTIONS not_available = 1.
RZL_GET_BA_DESCR CALL FUNCTION 'RZL_GET_BA_DESCR' EXPORTING betriebsart_name = ' ' "all TABLES instance_description_table = lt_spfid.
RSAU_SEL_ST_SUBCLASID CALL FUNCTION 'RSAU_SEL_ST_SUBCLASID' EXPORTING clsmap = clsmap.
RSAU_SEL_ST_SEVERITY CALL FUNCTION 'RSAU_SEL_ST_SEVERITY' EXPORTING sever = ld_sev_sel.
RSLG_SEL_ST_USER CALL FUNCTION 'RSLG_SEL_ST_USER' EXPORTING user = l_user.
RSAU_SEL_ST_CLIENT CALL FUNCTION 'RSAU_SEL_ST_CLIENT' EXPORTING clnt = l_client.
RSLG_SEL_ST_TCODE CALL FUNCTION 'RSLG_SEL_ST_TCODE' EXPORTING tcode = l_tcode.
RSLG_SEL_ST_REPNA CALL FUNCTION 'RSLG_SEL_ST_REPNA' EXPORTING repna = l_repna.
RSLG_SEL_ST_TERM * CALL FUNCTION 'RSLG_SEL_ST_TERM' * EXPORTING TERMINAL = l_term.
RSAU_SEL_ST_TERMINAL CALL FUNCTION 'RSAU_SEL_ST_TERMINAL' EXPORTING terminal = l_term.
RSAU_SEL_ST_FULLTEXT CALL FUNCTION 'RSAU_SEL_ST_FULLTEXT' EXPORTING txt = s_text.
RSLG_SEL_ST_TIMES CALL FUNCTION 'RSLG_SEL_ST_TIMES' EXPORTING sdate = cs_intv-dat_from stime = cs_intv-tim_from edate = cs_intv-dat_to etime = cs_intv-tim_to.
REUSE_ALV_LIST_DISPLAY CALL FUNCTION 'REUSE_ALV_LIST_DISPLAY' EXPORTING i_callback_program = c_repid it_fieldcat = it_fieldcat[] TABLES t_outtab = it_rfcerrlst.
REUSE_ALV_VARIANT_EXISTENCE CALL FUNCTION 'REUSE_ALV_VARIANT_EXISTENCE' EXPORTING i_save = gx_save CHANGING cs_variant = ls_variant EXCEPTIONS wrong_input = 1 not_found = 2 program_error = 3.
RSLG_SEL_DUMP CALL FUNCTION 'RSLG_SEL_DUMP' IMPORTING itself = ls_rslg_sel.
POPUP_GET_VALUES * CALL FUNCTION 'POPUP_GET_VALUES' * EXPORTING ** NO_VALUE_CHECK = ' ' * popup_title = 'Role' "#EC NOTEXT ** START_COLUMN = '5' ** START_ROW = '5' * IMPORTING * returncode = l_rc * TABLES * fields = lt_popup_values * EXCEPTIONS * error_in_fields = 1 * OTHERS = 2.
PRGN_ACTIVITY_GROUP_INHERITED * CALL FUNCTION 'PRGN_ACTIVITY_GROUP_INHERITED' * EXPORTING * activity_group = agr_name * EXCEPTIONS * activity_group_is_inherited = 1 * activity_group_does_not_exist = 2 * OTHERS = 3.
PRGN_AUTH_ACTIVITY_GROUP * CALL FUNCTION 'PRGN_AUTH_ACTIVITY_GROUP' * EXPORTING * activity_group = agr_name * action_create = 'X' * message_output = 'X' * EXCEPTIONS * not_authorized = 1 * OTHERS = 2.
PRGN_AUTH_ACTIVITY_GROUP * CALL FUNCTION 'PRGN_AUTH_ACTIVITY_GROUP' * EXPORTING * activity_group = agr_name * action_change = 'X' * message_output = 'X' * EXCEPTIONS * not_authorized = 1 * OTHERS = 2.
PRGN_ACTIVITY_GROUP_ENQUEUE * CALL FUNCTION 'PRGN_ACTIVITY_GROUP_ENQUEUE' * EXPORTING * activity_group = agr_name * EXCEPTIONS * foreign_lock = 1 * transport_check_problem = 2 * OTHERS = 3.
PRGN_CHECK_NAMESPACE * CALL FUNCTION 'PRGN_CHECK_NAMESPACE' * EXPORTING * activity_group = agr_name * IMPORTING * soft_namespace_problem = l_rc * EXCEPTIONS * namespace_error = 1 * illegal_characters = 2 * OTHERS = 3.
PRGN_ACTIVITY_GROUP_DEQUEUE * CALL FUNCTION 'PRGN_ACTIVITY_GROUP_DEQUEUE' * EXPORTING * activity_group = agr_name.
PRGN_CHANGEDOCUMENT_WRITE * CALL FUNCTION 'PRGN_CHANGEDOCUMENT_WRITE' * EXPORTING * activity_group = agr_name * upd_agr_define = 'I' * n_agr_define = ls_agr_define.
PRGN_CHANGEDOCUMENT_WRITE * CALL FUNCTION 'PRGN_CHANGEDOCUMENT_WRITE' * EXPORTING * activity_group = agr_name * upd_agr_texts = 'I' * TABLES * n_agr_texts = lt_agr_texts.
PRGN_CHANGEDOCUMENT_WRITE * CALL FUNCTION 'PRGN_CHANGEDOCUMENT_WRITE' * EXPORTING * activity_group = agr_name * upd_agr_flags = 'I' * TABLES * n_agr_flags = lt_agr_flags.
PRGN_STRU_LOAD_NODES * CALL FUNCTION 'PRGN_STRU_LOAD_NODES' * EXPORTING * activity_group = agr_name * TABLES * i_nodes_out = menu_hierarchy * i_texts_out = menu_texts.
DRAG_DROP_EVENT_ADD_NODE * CALL FUNCTION 'DRAG_DROP_EVENT_ADD_NODE' * EXPORTING * target_id = target_id * node_information = struc_string * text = l_text * language = sy-langu * add_as_first_node_in_folder = 'X' * node_is_folder = ' ' * IMPORTING * new_id = target_id * TABLES * menu_hierarchy = menu_hierarchy * menu_texts = menu_texts.
DRAG_DROP_EVENT_ADD_NODE * CALL FUNCTION 'DRAG_DROP_EVENT_ADD_NODE' * EXPORTING * target_id = target_id * node_information = struc_string * text = l_text * language = sy-langu * add_as_first_node_in_folder = 'X' * node_is_folder = ' ' * IMPORTING * new_id = target_id * TABLES * menu_hierarchy = menu_hierarchy * menu_texts = menu_texts.
PRGN_STRU_SAVE_NODES * CALL FUNCTION 'PRGN_STRU_SAVE_NODES' * EXPORTING * activity_group = agr_name * use_global_tables = ' ' * TABLES * menu_hierarchy = menu_hierarchy * menu_texts = menu_texts.
PRGN_ACTIVITY_GROUP_DEQUEUE * CALL FUNCTION 'PRGN_ACTIVITY_GROUP_DEQUEUE' * EXPORTING * activity_group = agr_name.
AUTHORITY_CHECK_TCODE * CALL FUNCTION 'AUTHORITY_CHECK_TCODE' * EXPORTING * tcode = 'PFCG' * EXCEPTIONS * ok = 0 * not_ok = 2.
PRGN_AUTH_ACTIVITY_GROUP * CALL FUNCTION 'PRGN_AUTH_ACTIVITY_GROUP' * EXPORTING * activity_group = agr_name * action_display = 'X' * action_change = 'X' * EXCEPTIONS * not_authorized = 1 * OTHERS = 2.
PRGN_SHOW_EDIT_AGR * CALL FUNCTION 'PRGN_SHOW_EDIT_AGR' * STARTING NEW TASK 'PFCG' "Open new window * EXPORTING * agr_name = agr_name * mode = 'A' "1=create, X=change, A=display * screen = '2' "1=description, 2=menu * sicht = '1' * EXCEPTIONS * OTHERS = 0.
RSLG_SEL_DUMP CALL FUNCTION 'RSLG_SEL_DUMP' IMPORTING itself = ls_rslgsel.
Contribute (Add Comments)
Although this basic information may have limited use it does provide an easy to find location to store any knowledge about this program/report.
The contribute/comments section below therefore offer's an opportunity for anyone to add additional information. This can be anything from useful hints, tips and screen shots to relevant SAP notes or anything else you feel is relevant to this report.
This will then be available for everyone to easily find by simply searching on the report name RSAU_SELECT_EVENTS or its description.
RSAU_SELECT_EVENTS - Selection of Audit Events from the Audit Files (Background Variant) RSAU_SELECT_EVENTS - Selection of Audit Events from the Audit Files (Background Variant) RSAU_ROUTINE_CHECK - Report RSAU_ROUTINE_CHECK RSAU_ROUTINE_CHECK - Report RSAU_ROUTINE_CHECK RSAU_READ_AUDITLOG_EXTERNAL - SecAudit: Example of Reading Alerts Using BAPIs RSAU_READ_AUDITLOG_EXTERNAL - SecAudit: Example of Reading Alerts Using BAPIs