Indicator in Event Log type in SAP ETD

[menenita01]

Hi,

I am pushing some logs (from the Security Audit Log) from the SAP S/4 HANA system to the SAP ETD and it seems they are transferred correctly. However, when I checked in the Forensic Lab, and use the Event Log type equal to Security Audit Log, nothing is available.

There are plenty of events, but all related to "Indicator". Is it possible to an error in the classification of the event collector?

Thank you,

Regards,

[GRCwithRaghu]

Hi Mercedes,

We also have the same issue in one of the client's environment. Can you confirm the solution.

Regards,

Raghu

[anotherbasicguy]

Hi there,

I don't experience the problem like you do, however I also noticed Log Type "Indicator" on Patterns that should not produce Indicators from my understanding. In my case all events seem to show up properly in the corresponding Log Type + a certain amount of Indicators.

Maybe it's related to Kafka configuration? Maybe an update of ETD helps?

Best regards,

André

[menenita01]

Hi Andre,

Thanks for your reply. What kind of configuration are you referring to?

Thank you!

Regards,

[anotherbasicguy]

Well I suppose that you also use Apache Kafka as the streaming service between your SAP systems and ETD. Checking the log files and configuration of Log Collector or Kafka_2_Hana might be useful. Also checking SECM_CONFIGURATION on ABAP side first probably makes sense.