/
STRUST_HISTORY - Certificate change history

STRUST_HISTORY - Certificate change history

Data Description

The STRUST_HISTORY event is used to give a visibility of certificate changes in the system, including certificate description, user who made changes and time when it was done.

Potential Use Cases

This event could be used in the following scenarios:

  • Search for certificate changes within specific time range

  • Find users who added or removed certain certificates in the system

  • Monitor changes as part as broader system security monitoring

SAP Navigation

  1. Open STRUST

  2. Right click on necessary PSE → History

  3. Select versions to compare and press Compare button

 

Related content

SAP PowerConnect Content Pack for Splunk Enterprise Security - v1.2.0 Release Notes
SAP PowerConnect Content Pack for Splunk Enterprise Security - v1.2.0 Release Notes
More like this
KB 192 - STRUST_HISTORY events are not collected
KB 192 - STRUST_HISTORY events are not collected
More like this
SECPOL_LOG - Change Logs for Security Policies
SECPOL_LOG - Change Logs for Security Policies
More like this
HDB_CERT_LIST - HANA DB Certificate List
HDB_CERT_LIST - HANA DB Certificate List
More like this