189 8069 5689
T-code：sm20 查所有server的系统日记
我们提供的服务有：成都网站设计、做网站、微信公众号开发、网站优化、网站认证、来宾ssl等。为超过千家企事业单位解决了网站和推广的问题。提供周到的售前咨询和贴心的售后服务，是有科学管理、有技术的来宾网站制作公司
T-code：sm21 查本机server的系统日记
干了坏事要消除罪证？你要把audit log 和 system log 都删掉才行
audit log 删除
1. To access the Security Audit Log reorganization tool from the SAP standard menu,
choose Tools à Administration à Monitor à Security Audit Log à Reorganization.
The Security Audit: Delete Old Audit Logs screen appears.
2. Enter the Minimum age of files to delete (default = 30 days).
This value must be 3.
3. Activate the To all active instances indicator to delete the audit files from all application
servers. Leave the indicator blank if you only want to delete the files from the local
application server.
4. Activate the Simulation only indicator if you do not actually want to delete the files. In this
case, the action is only simulated.
5. Choose Audit Log à Continue.
但这个只能删3天前的，如果你一定要删现在的需要操作系统的权限 （操作系统下做动作的话，操作系统也会有日志的，各系统设置不同，请自行脑补）
audit log 在参数 rsau/local/file 里决定路径和文件名。
system log
system log 分本地log 和全局log 都要删
If the syslog really should be deleted, you should first consider, that for 'n' application servers, there are 'n' syslogs, plus 1 central syslog. (The central syslog only exists if at least one machine is running UNIX.)
You need the filenames. These can be determined, for example, with the report RSPFPAR or the command 'sapparar'. The following table shows the profile variables and typical values:
rslg/central/file /usr/sap/C11/SYS/global/SLOGJ
rslg/central/old_file /usr/sap/C11/SYS/global/SLOGJO
rslg/local/file /usr/sap/C11/D01/log/SLOG01
rslg/send_daemon/status_file /usr/sap/C11/D01/data/rslgssta
R/3 must be stopped. If the operating system was not also restarted, the shared memory segment 'SCSA' may still exist. This must also be removed. Possible ways to do this are listed in note number 12715.
To delete the central syslog, both syslog files must be deleted. They are recreated automatically when the system is restarted.
To delete one of the local syslog, stop the corresponding application server and delete its SCSA. The syslog file and the small management file are then deleted. They are recreated automatically when the system is restarted.
If the locale syslog file is mistakenly deleted without the described preparation, it is recreated incorrectly. However, it can be repaired after this with the report 'RSLG0020' (note 21153).
翻滚吧，骚年
打开使用记录。1、sap的字段和对象的修改都会保存旧值，数据保存在CDHDR和CDPOS表记录了用户于什么时间点用sap设置查看日志。