## 13.9.2.2.6  Security-Relevant Logging and Tracing
SAP systems have a variety of logs for system administration, monitoring, problem solving, and auditing purposes. Audits and logs are important for monitoring the security of your system and to track events, in case of problems.
##  Note
Auditing and logging for ABAP Platform is described in detail in the ABAP Platform Security Guide .
Go to https:/ /help.sap.com/s4hana\_op\_2021, enter Security Aspects for Lifecycle Management into the search bar, press Enter , open the search result with that title, and navigate to Auditing and Logging .
## Security Audit Log Triggered by Virus Scan Interface (VSI)
Class CL\_VSI automatically creates entries in the Security Audit Log for infections and scan errors found, together with the following information:
- Profile
- Profile step allowing the detection of the scanner-group
- Kind of virus found, with internal virus ID of the scan engine, if available
- User name and timestamp
The messages logged are located in message class VSCAN using system log messages BU8 and BU9 (created in transaction SE92 ). The severities are set to High and Medium respectively. The severity of the audit class is set to Miscellaneous .
For more information, see Customizing for SAP Supply Chain Management under SAP Web Application Server System Administration Virus Scan Interface .
## Audit Information System (AIS)
Information about auditing and logging for the Audit Information System (AIS) is described in detail in the ABAP Platform Security Guide .
For more information, go to https:/ /help.sap.com/s4hana\_op\_2021, enter Audit Information System (AIS) into the search bar, press Enter , and open the search result with that title.
For more information about security logs for the SAP Gateway, go to https:/ /help.sap.com/s4hana\_op\_2021, enter Logging in SAP Gateway into the search bar, press Enter , and open the search result with that title.
## Transportation Management (TM)
## Tracing and Logging of Business Objects
In TM, you can log messages raised by business objects in the application log.
In the standard system, logging is deactivated. To activate logging, in Customizing for Transportation Management , choose Basic Functions User Interface Define Message Settings (note that this has negative impact on overall system performance; this is why SAP recommends to switch on logging only when required).
To access the application log, on the SAP Easy Access or in SAP Business Client screen, choose Application Administration Application Log: Display Logs . Alternatively, call transaction SLG1 .
For more information, go to https:/ /help.sap.com/s4hana\_op\_2021, enter Logging of Specific Activities into the search bar, press Enter , open the search result with that title, and navigate to Application Logging .
## Activating Change Documents
In TM, you can activate change documents to log changes to master data, business objects, and so on.
You must activate change documents in Customizing before the system can store them. For information about the objects for which you can activate change documents and where to activate them, see the corresponding section in the TM documentation:
| Object               | Customizing Path                                                                                                                             |
|----------------------|----------------------------------------------------------------------------------------------------------------------------------------------|
| Location             | Transportation Management Master Data Transportation Network Location Activate Change Documents                                              |
| Transportation lane  | Transportation Management Master Data Transportation Network Transportation Lane Activate Change Documents                                   |
| Product              | SCMBasis Master Data Product Activate Change Documents                                                                                       |
| Freight unit         | Transportation Management Planning Freight Unit Define Freight Unit Types ( Track Changes checkbox)                                          |
| Freight order        | Transportation Management Freight Order Management Freight Order Define Freight Order Types ( Track Changes checkbox)                        |
| Freight booking      | Transportation Management Freight Order Management Freight Booking Define Freight Booking Types ( Track Changes checkbox)                    |
| Freight agreement    | Transportation Management Master Data Agreements and Service Products Define Freight Agreement Types ( Track Changes checkbox).              |
| Forwarding agreement | Transportation Management Master Data Agreements and Service Products Define FWAand Service Product Catalog Types ( Track Changes checkbox). |
| Forwarding order     | Transportation Management Forwarding Order Management Forwarding Order Define Forwarding Order Types ( Track Changes checkbox).              |
| Forwarding quotation | Transportation Management Forwarding Order Management Forwarding Quotation Define Forwarding Quotation Types ( Track Changes checkbox).      |
| Object                                    | Customizing Path                                                                                                                                                                      |
|-------------------------------------------|---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------|
| Forwarding settlement                     | Transportation Management Settlement Forwarding Settlement Define Forwarding Settlement Document Types ( Track Changes checkbox).                                                     |
| Freight settlement                        | Transportation Management Settlement Freight Settlement Define Freight Settlement Document Types ( Track Changes checkbox).                                                           |
| Order-based transportation requirement    | Transportation Management Integration ERP Logistics Integration Order-Based Transportation Requirement Define Order-Based Transportation Requirement Types ( Track Changes checkbox). |
| Delivery-based transportation requirement | Transportation Management Integration ERP Logistics Integration Delivery-Based Transportation Requirement Define Delivery-Based Transportation Requirement Types                      |
| Service order                             | Transportation Management Freight Order Management Service Order Define Service Order Types ( Track Changes checkbox).                                                                |
## SAP SCM Optimizer
For information about the trace and log files for the SAP SCM Optimizer, see the SAP SCM 7.0 Component Security Guide .
To delete all the data privacy relevant information in log files and the explanation tool tables, you must run the following reports periodically:
- RCC\_CLEANUP for SAP SCM Optimizer log files Deletes all log entries made by RCC and all external files on remote engine servers for which the log deletion time parameter is set in RCC\_CUST .
- /SCMTMS/PLN\_EXP\_DELETE for TM explanation tool Deletes optimizer explanation logs older than x days.
The general recommendation is to run these reports everyday as stated in the Operations Guide.
For more information about the logging and tracing mechanisms, go to https:/ /help.sap.com/s4hana\_op\_2021, enter Security Aspects for Lifecycle Management into the search bar, press Enter , open the search result with that title, and navigate to Auditing and Logging .