SAP Knowledge Base Article - Preview

2608489 - Multiple entries in AUDIT log for "CONNECT" event_action

Symptom

You created an audit policy in SAP HANA to log "CONNECT" events to the system.

When you analyze the AUDIT_LOG ("PUBLIC"."AUDIT_LOG") you notice that when you connect HANA using SAP HANA Studio, sometimes, there are multiple entries:

TIMESTAMP             HOST      PORT   SERVICE_NAME CONNECTION_ID USER_NAME AUDIT_POLICY_NAME EVENT_STATUS EVENT_LEVEL EVENT_ACTION GRANTEE
22/02/2018 19:16:18.0 saphanahost 30.003 indexserver  225.441 SAPUSER audit_name        SUCCESSFUL   INFO        CONNECT      SAPUSER
22/02/2018 19:17:01.0 saphanahost 30.003 indexserver  225.446 SAPUSER audit_name        SUCCESSFUL   INFO        CONNECT      SAPUSER
22/02/2018 19:17:02.0 saphanahost 30.003 indexserver  225.447 SAPUSER audit_name        SUCCESSFUL   INFO        CONNECT      SAPUSER
22/02/2018 19:17:07.0 saphanahost 30.003 indexserver  225.449 SAPUSER audit_name        SUCCESSFUL   INFO        CONNECT      SAPUSER

You want to understand why there are multiple entries.


Read more...

Environment

  • SAP HANA System;
  • SAP HANA Studio.

Product

SAP HANA studio all versions ; SAP HANA, platform edition all versions

Keywords

Connect, audit, studio, system, audit_log , KBA , HAN-DB-SEC , SAP HANA Security & User Management , HAN-STD-ADM-SEC , SAP HANA Security & User Management (Studio) , Problem

About this page

This is a preview of a SAP Knowledge Base Article. Click more to access the full version on SAP for Me (Login required).

Search for additional results

Visit SAP Support Portal's SAP Notes and KBA Search.