SAP Knowledge Base Article - Preview

2608489 - Multiple entries in AUDIT log for "CONNECT" event_action

Symptom

You created an audit policy in SAP HANA to log "CONNECT" events to the system.

When you analyze the AUDIT_LOG ("PUBLIC"."AUDIT_LOG") you notice that when you connect HANA using SAP HANA Studio, sometimes, there are multiple entries:

TIMESTAMP             HOST      PORT   SERVICE_NAME CONNECTION_ID USER_NAME AUDIT_POLICY_NAME EVENT_STATUS EVENT_LEVEL EVENT_ACTION GRANTEE
22/02/2018 19:16:18.0 saphanahost 30.003 indexserver  225.441 SAPUSER audit_name        SUCCESSFUL   INFO        CONNECT      SAPUSER
22/02/2018 19:17:01.0 saphanahost 30.003 indexserver  225.446 SAPUSER audit_name        SUCCESSFUL   INFO        CONNECT      SAPUSER
22/02/2018 19:17:02.0 saphanahost 30.003 indexserver  225.447 SAPUSER audit_name        SUCCESSFUL   INFO        CONNECT      SAPUSER
22/02/2018 19:17:07.0 saphanahost 30.003 indexserver  225.449 SAPUSER audit_name        SUCCESSFUL   INFO        CONNECT      SAPUSER

You want to understand why there are multiple entries.


Read more...

Environment

  • SAP HANA System;
  • SAP HANA Studio.

Product

SAP HANA studio all versions ; SAP HANA, platform edition all versions

Keywords

Connect, audit, studio, system, audit_log , KBA , HAN-DB-SEC , SAP HANA Security & User Management , HAN-STD-ADM-SEC , SAP HANA Security & User Management (Studio) , Problem

About this page

This is a preview of a SAP Knowledge Base Article. Click more to access the full version on SAP ONE Support launchpad (Login required).

Search for additional results

Visit SAP Support Portal's SAP Notes and KBA Search.