The Audit File / The Audit Record
The audit files are located on the individual application servers. You define the name and
location of the files in the profile parameter rsau/local/file. When an event occurs that
is to be audited, the system generates a corresponding audit record, also called an audit
message, and writes it to the file. The audit record contains the following information (if
known):
· Event identifier (a 3-character code)
· SAP user ID and client
· Terminal name
· Transaction code
· Report name
· Time and date when the event occurred
· Process ID
· Session number
· Miscellaneous information
You define the maximum size of the audit file in the profile parameter
rsau/max_diskspace/local. The default is 1000000 bytes (= 1 MB). If the maximum size
is reached, then the auditing process stops.

0000000000: 71 41 55 4B 32 30 30 35 │ 30 32 30 37 30 30 30 30  qAUK200502070000
0000000010: 30 37 30 30 20 20 37 34 │ 35 20 20 20 20 34 44 34  0700  745    4D4
0000000020: 53 4B 49 59 2D 57 32 4B │ 43 53 4D 52 45 47 20 20  SKIY-W2KCSMREG
0000000030: 20 20 20 20 20 20 20 20 │ 20 20 20 20 20 20 20 20
0000000040: 20 20 20 20 20 20 20 20 │ 53 41 50 4D 53 53 59 31          SAPMSSY1
0000000050: 20 20 20 20 20 20 20 20 │ 20 20 20 20 20 20 20 20
0000000060: 20 20 20 20 20 20 20 20 │ 20 20 20 20 20 20 20 20
0000000070: 34 30 30 31 53 41 4C 43 │ 26 53 41 50 4C 53 41 4C  4001SALC&SAPLSAL
0000000080: 43 26 53 41 4C 43 5F 55 │ 54 49 4C 5F 4D 54 5F 47  C&SALC_UTIL_MT_G
0000000090: 45 54 5F 41 49 44 5F 42 │ 59 5F 54 49 44 20 20 20  ET_AID_BY_TID
00000000A0: 20 20 20 20 20 20 20 20 │ 20 20 20 20 20 20 20 20
00000000B0: 20 20 20 20 71 41 55 57 │ 32 30 30 35 30 32 30 37      qAUW20050207
00000000C0: 30 30 30 30 32 32 30 30 │ 20 36 30 33 33 20 20 20  00002200 6033
00000000D0: 20 30 42 30 20 20 20 20 │ 20 20 20 20 53 41 50 53   0B0        SAPS
00000000E0: 59 53 20 20 20 20 20 20 │ 20 20 20 20 20 20 20 20  YS
00000000F0: 20 20 20 20 20 20 20 20 │ 20 20 20 20 52 53 42 54              RSBT
0000000100: 43 52 54 45 20 20 20 20 │ 20 20 20 20 20 20 20 20  CRTE
0000000110: 20 20 20 20 20 20 20 20 │ 20 20 20 20 20 20 20 20
0000000120: 20 20 20 20 30 30 30 31 │ 52 53 42 54 43 52 54 45      0001RSBTCRTE
0000000130: 26 20 20 20 20 20 20 20 │ 20 20 20 20 20 20 20 20  &
0000000140: 20 20 20 20 20 20 20 20 │ 20 20 20 20 20 20 20 20
0000000150: 20 20 20 20 20 20 20 20 │ 20 20 20 20 20 20 20 20
0000000160: 20 20 20 20 20 20 20 20 │ 71 41 55 57 32 30 30 35          qAUW2005
0000000170: 30 32 30 37 30 30 30 30 │ 32 32 30 30 32 35 32 37  0207000022002527
0000000180: 34 20 20 20 32 33 42 31 │ 20 20 20 20 20 20 20 20  4   23B1
0000000190: 53 41 50 53 59 53 20 20 │ 20 20 20 20 20 20 20 20  SAPSYS
00000001A0: 20 20 20 20 20 20 20 20 │ 20 20 20 20 20 20 20 20
00000001B0: 52 53 42 54 43 52 54 45 │ 20 20 20 20 20 20 20 20  RSBTCRTE
00000001C0: 20 20 20 20 20 20 20 20 │ 20 20 20 20 20 20 20 20
00000001D0: 20 20 20 20 20 20 20 20 │ 30 30 30 31 52 53 42 54          0001RSBT
00000001E0: 43 52 54 45 26 20 20 20 │ 20 20 20 20 20 20 20 20  CRTE&
00000001F0: 20 20 20 20 20 20 20 20 │ 20 20 20 20 20 20 20 20
0000000200: 20 20 20 20 20 20 20 20 │ 20 20 20 20 20 20 20 20
0000000210: 20 20 20 20 20 20 20 20 │ 20 20 20 20