SAP HANA audit policy specifies the actions to be audited and also the condition under which the action must be performed to be relevant for auditing. Audit Policy defines what activities have been performed in HANA system and who has performed those activities at what time.

SAP HANA database auditing feature allows to monitor the action performed in HANA system. SAP HANA audit policy must be activated on HANA system to use it. When an action is performed, the policy triggers an audit event to write an audit trail. You can also delete audit entries in Audit trail.

In a distributed environment, where you have multiple database, Audit policy can be enabled on each individual system. For the system database, audit policy is defined in nameserver.ini file and for tenant database it is defined in global.ini file.

Audit in the SAP HANA Cockpit

You can configure and activate Auditing policy in SAP HANA system using SAP HANA Cockpit. There is an Auditing app in SAP HANA Cockpit that can be used for auditing activities.

The role required to perform auditing in HANA system − sap.hana.security.cockpit.roles::MaintainAuditPolicy

In SAP HANA Cockpit, Auditing tile is available under SAP HANA Security Overview as in the following screenshot.

sap 96

When you open Auditing App, navigate to Configuration tab and select Edit button from the bottom.

sap 97

Next, select Auditing status to Enabled. You have to configure multiple audit trail targets: one for the system (Overall Audit Trail Target), and optionally one or more for the severity of audited actions that is the audit level of the corresponding audit entries.

If you do not configure a specific target for an audit level, audit entries are written to the audit trail target configured for the system.

sap 98

By default, database table is default audit trail target. You can also select – Syslog, CSV text file for audit trail target.

Create an Audit Policy

You can define an audit policy to monitor the actions for audit. When an action is performed, the policy is triggered and an audit event is written to audit trail. You can create an audit policy using Auditing app of HANA system.

Step 1 − To create an Audit Policy, navigate to Audit Policies tab.

sap 99

Step 2 − On the right side, create Audit Policy button. Click the Create Audit Policy button and enter the Policy name.

sap 100

Step 3 − Select the status of Audit Policy. You can select Enabled/Disabled option.

Step 4 − Select the Action status.

SUCCESSFUL − The action is audited only when the SQL statement is successfully executed.
UNSUCCESSFUL − The action is audited only when the SQL statement is unsuccessfully executed.
ALL − The action is audited when the SQL statement is both successfully and unsuccessfully executed.

Step 5 − Select the audit level. The audit level specifies the severity of the audit entry written to the audit trail when the actions in the policy occur.

Step 6 − Select Audit Trail Target. Audit entries triggered by this policy will be written to the specified audit trail target(s).

sap 101

Step 7 − Enter the actions to be audited by clicking the add button and selecting the relevant actions.

There are different Actions that can be selected using Add Action button as shown in the following screenshot.

sap 102

In Add action, you need to enter the target object(s) to be audited by clicking the add button and selecting the relevant objects. You can also select actions to be audited. For example: SELECT, INSERT, UPDATE, DELETE, and EXECUTE. You can click the Save button to SAVE the policy.

Check Audit Details in HANA Cockpit

In SAP HANA Cockpit, you can check the audit details of all Audit Policies. When you open the Audit app of SAP HANA Cockpit, navigate to Audit Policies tab. You will find the following details.

sap 103

Note − You can manage Auditing Policy in SAP HANA Studio as well.

So, this brings us to the end of blog. This Tecklearn ‘Auditing Activities in SAP Hana’ blog helps you with commonly asked questions if you are looking out for a job in SAP Hana Administration and SAP Domain. If you wish to learn SAP Hana Administration and build a career in SAP domain, then check out our interactive, SAP HANA Administration Training, that comes with 24*7 support to guide you throughout your learning period. Please find the link for course details:

https://www.tecklearn.com/course/sap-hana-administraion/

SAP HANA Administration Training

About the Course

SAP HANA Administration training will help you learn SAP HANA administration tools, security and user management, system management and availability, data provisioning and integration with non-SAP systems and more. You will deploy SAP HANA Studio, automate through OS scripts, command line admin tools through hands-on projects and case studies. This course is designed to clear the HA200 SAP HANA Operations and Administration Certification conducted by SAP and helps you get the best jobs in top MNCs.

Why Should you take SAP HANA Administration Training?

The average salary for SAP HANA Database Administrator ranges from approximately $65,843 yearly for Administrator to $143,051 yearly for Enterprise Architect. – Indeed.com
SAP HANA is one of the top tools for working with real-time data due to the transformational nature of this tool. The role of an SAP HANA Administration and Operations personnel is critical of the success of SAP HANA deployment in any industrial set-up.
Worldwide Business Intelligence and Analytics Market to grow to $22.8 billion in next 2 years – Gartner.

What you will Learn in this Course?

Overview of SAP HANA

Overview of SAP HANA
Features and Benefits of SAP HANA
SAP HANA Components
Concept of SAP HANA guides
Scenarios in SAP HANA Administration

Architecture of SAP HANA

What is SAP HANA persistence?
Concept of Sizing in SAP HANA
Process of achieving scale out in SAP HANA
How SAP HANA achieves in-memory computation
Concept of columnar database
How SAP HANA is so fast with comparison to other tools

SAP HANA installation

Overview of SAP HANA tools

SAPA HANA Studio for Administration activities in SAP HANA
Accessing local and remote HANA systems using Client Tool
Monitor, Control, Configure and Administer the SAP HANA database using DBA Cockpit
Using HANA Studio Information modelling and data provisioning in HANA database
SAP HANA Transport

SAP HANA Operations

Privileges in HANA
Configure Password Policy and create user in SAP HANA
Auditing in SAP HANA

SAP HANA Smart Data Access

Data Provisioning in SAP HANA

Leveraging SAP HANA technology and integration architecture for enriching, cleansing and transforming data from disparate sources
Data replication with the SAP Landscape Transformation (SLT)
Implementing SLT Configuration with SUSPEND LOAD

SAP HANA Operations

Create Repository and Job Server
SAP GRC Architecture

Administration Operations in HANA Studio

Updating HANA database using lifecycle management
Security in SAP HANA
Sessions and Transactions in SAP HANA
Configure System Replication using HANA Cockpit

Migration to SAP HANA using DMO

Performance Monitoring and Analysis in SAP HANA

Got a question for us? Please mention it in the comments section and we will get back to you.

470