Quantcast
Channel: SCN : All Content - Governance, Risk and Compliance (SAP GRC)
Viewing all articles
Browse latest Browse all 5097

GRC 10 EAM Logs not being collected

$
0
0

A little background. 4 weeks ago, I left this client with working Firefighter.  A user could go to request an ID, the appropriate owner would get an approval email, and on approval, that ID would get provisioned to the user. 

 

The user would then log in, do their work, and an email would get sent to the controller immediately. 

 

Then a little bit after the user would log out, the logs would be collected, and an email would get sent to the controller for the log review.

 

The controller would then be able to come in and review the log and approve it.

 

ALL THIS WAS WORKING.

 

Now they have me back because it stopped working and apparently no one has changed anything or touched anything.  Of course I don't believe it because this doesn't just stop working on its own.

 

I've gone in and checked - the first part works - a user can request an ID.  All out bound emails work.  Requests are placed in the inbox, approvers can approve and it gets provisioned.

 

User can log in and use the Firefighter IDs.  However, no outbound notification is sent - it's not even there in SOST (prior outbound emails are there - indicating that when I provisioned the test ID, it sent emails properly).

 

Background jobs are running, and don't indicate any failures.

 

However, logs are empty, no login notification is sent to the controller, and the log review workflow is totally dead. 

 

I've checked the MSMP config and it doesn't appear to have been modified.

 

To be sure, I gave WF-BATCH SAP_ALL and SAP_NEW and then retested, and the log review process was still quite dead.

 

I've checked the config parameters and they all match my backup, which I'd made before I left.

 

So now I'm really drawing a blank on why this log review process would have died.

 

One thing of note is that in the backend system, my user ID has now been locked.  I don't recall if there was any process using my user ID that was running on there that is relevant in this context.

 

Anyway, I'm stumped on this one.  Thanks for helping.

 

Santosh


Viewing all articles
Browse latest Browse all 5097

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>