user_name is null in Audit_event table

[Former Member]

Hello,

Environment: SAP BI4.0 SP2 (Linux)

Auditing type: Complete

In our environment we have noticed a very large number of events with user_name as null. These events are growing daily and consuming all the DB space.

I have checked service_type_name (from ads_service_type_str table) for those client_type_id (from ADS_EVENT table) and found the below details

Web Intelligence Processing Service

Job Server

Logon without Client ID

Central Management Service

Central Configuration Manager

CMC

BI launch pad

Open Document

Live Office

I couldn't find anything related to this (user_name as null) over net or forums. Please let me know If someone has any idea on the probably reason.

Thanks

[Former Member · Accepted solution]

Hi Chakri,

Please refer to this KBA " 1770053 - Auditing Database is growing very fast with SYSTEM and
NULL ACCOUNT entries. " Which can help you:

http://service.sap.com/sap/support/notes/1770053

Kind Regards,

Ameni

[Former Member · Accepted solution]

Thanks Ameni for pointing me to the right direction.

Cheers

[Former Member · Accepted solution]

Hi Ameni,

The notes provided some information but i see that the NULL user account in audit database is too high.

What i have noticed is that an event with null user account is being created almost every second even when there is no user accessing the environment.

Are there any steps/notes to debug the issue.

Thanks

[Former Member]

Hello,

Does anybody have this similar issue in their environments. I couldn't find anything that could help me in troubleshooting the issue.

[Former Member]

Hello Chakri,

We you able to find a resolution to this problem.

I have a BI41 SP03 env on RHEL. I have a similar issue. Only, in my case, the sessions for Administrator UserID keep on increasing.

Awaiting response.

Rgds,

Sree