Hello,
There's a user called SOLMANCONFIG that keeps getting locked in my (Solution Manager) system. It's getting called by some rogue RFC (could be external - this SolMan installation is connected to 30+ systems) which does not have the correct credentials for the ID.
Turned SM19 audit log for the ID yesterday.
Id got locked today once again.
Generated the audit log for a short time period around the time of locking, in SM20.
Results as attached.
As you can see, there's nothing in the "Terminal" column! It's not there in the detailed display either.
This problem has bugged me for quite a while now. Would really appreciate any help that would let me fix this. Mind you, this could be an RFC call from a satellite system, so checking the RFC destinations maintained in my own landscape (i.e. contents of the RFCDES table) might not be enough.
EDIT : If I recall correctly, there are also some profile parameters that need to be enabled to generate detailed logs in SM19/20. Is that relevant here?