SAP User Monitor

Monitors the number of users depending on type and state and checks if the special user SAP* is present and configured correctly

General

Executable	SAP_User_Monitor.exe
Connection method	RFC
Ports	33$$ 48$$ (SNC) ($$ = Instance number)
Lookup files	itesys.sapusermonitor.sapstarparameter.ovl itesys.sapusermonitor.sapstaruser.nowarning.ovl itesys.sapusermonitor.sapstaruser.ovl itesys.sapusermonitor.sapstaruserclass.ovl

Default parameters

Parameter name	Possible values	Default	Description
Host	<ip> | <hostname> | <fqdn>	empty	Hostname or IP of the target system. If you use a virtual hostname on your SAP servers, please use also the virtual host to connect.
SAPSID	string (3) | XXX	empty	SID of the SAP system
SAPInstance	number (2) | 00 - 99	empty	Instance number of the SAP system
SAPClient	number (3) | 000 - 999	empty	SAP Client (CLNT/MANDT)
SAPUsername	string	empty	SAP user
SAPPassword	string	empty	Password of the SAP user

Sensor-specific parameters

Parameter name	Possible values	Default	Description
DefaultUsers	<user1>,<user2>,...	DDIC,SAP*,SAPSUPPORT	Users which should be treated as default users for channels Default users with SNC name, Job steps planned with default users, Job steps planned with non-SYSTEM users, RFC connections with default users, RFC connections with non-SYSTEM users.
ExcludedUsers	<user1>,<user2>,...	empty	Users which should be excluded from the checks.
UsersForLoginCheck	<user1>,<user2>,...	DDIC,SAP*,SAPSUPPORT	Users for which the last login should be checked in channel Days since last login.

Channels

Channel name	Description	Lookup file
Users total	Number of users of the client where the sensor is running
Users Type Dialog (A)	Number of users with type "Dialog"
Users Type System (B)	Number of users with type "System"
Users Type Communication (C)	Number of users with type "Communication"
Users Type Reference (L)	Number of users with type "Reference"
Users Type Service (S)	Number of users with type "Service"
Users Not Locked	Number of users with no lock
Users Locked By CUA	Number of users with lock set by CUA (Central User Administration)
Users Locked By Admin	Number of users with lock set by administrator
Users Locked After Failed Logon	Number of users with lock set because of failed logins
Users Locked Combined Reason	Number of users with lock set because of multiple reasons
Users Valid	Number of users which are valid depending on validity dates
Users InValid	Number of users which are invalid depending on validity dates
Users with Initial PW	Number of users with an initial password
Users With Locked PW	Number of users with a locked password
User SAP*	Shows if the user SAP* exists or not. (If you want to avoid the warning if SAP* doesn�t exist, you can use the lookup file itesys.sapusermonitor.sapstaruser.nowarning.ovl)	itesys.sapusermonitor.sapstaruser.ovl itesys.sapusermonitor.sapstaruser.nowarning.ovl
User SAP* Parameter login/no_automatic_user_sapstar	Shows if the parameter login/no_automatic_user_sapstar is set correctly depending on SAP Note 2383	itesys.sapusermonitor.sapstarparameter.ovl
User SAP* Class	Shows if the user class for the user SAP* is set correctly depending on SAP Note 2383 OK: SUPER (Set correctly) Error: Set Incorrectly	itesys.sapusermonitor.sapstaruserclass.ovl
Days since last login	Number of days since a standard user specified in parameter DefaultUsers last logged in.
Default users with SNC name	Number of default users specified in parameter DefaultUsers which have a SNC name.
Job steps planned with default users	Number of job steps which are running under a default user specified in parameter DefaultUsers.
Job steps planned with non-SYSTEM users	Number of job steps which are running with a user other than type SYSTEM (B).
RFC connections with default users	Number of RFC connections which are running under a default user specified in parameter DefaultUsers.
RFC connections with non-SYSTEM users	Number of RFC connections which are running with a user other than type SYSTEM (B).

Important notes

warning

Please check the limits if they fit for your alerting.

Changelog

Version	Changes
2024.10	Added new parameter UsersForLoginCheck Added new channel Days since last login Added new parameter DefaultUsers Added new channel Default users with SNC name Added new channel Job steps planned with default users Added new channel Job steps planned with non-SYSTEM users Added new channel RFC connections with default users Added new channel RFC connections with non-SYSTEM users
2024.04	Fixed read of parameters when having multiple application servers
2023.06	Wrong lookup value for SAP* has been corrected
2022.08	First stable release