TU02 - Parameter Changes in SAP System

Data Description

The TU02 event is used to find/check the parameter changes in the SAP system.

Potential Use Cases

This event could be used in the following scenarios:

• Determine which Operating system, SAP, & OS Parameters are changed in the SAP system/s

• Monitor to determine if critical Parameters are added/changed along with information on the old and new values of the Parameters

• Identify and alert on the Parameters changed/maintained, which could create compliance concerns

Splunk Event

The event will look like this in Splunk:

SAP Navigation

Log in to the SAP system, execute the transaction TU02 and click on Hostname to display the changed 'Parameters' list.