SAP has a special framework for enabling the RFC logging, it is called LOWGWIN (LOGCOM 200).
Feature set:
The logging of RFCs allows you to establish which users had access to
which data at what point in time. You can log data on RFC Function
Module (FM) level, for example:
In order to minimize the amount of logged data, you can do the following:
Restrict logging to certain users
Filter the parameters that need to be logged before they are included in the log records
Enable logging on client level only for the RFC Function Modules that
you want to log
You can fine-tune wich RFC calls (modules) will be logged including successful or failed ones by BAdI /LOGWIN/BADI_RFC_LOG_FILTER
.
Initially the log is stored temporarily in SAP and can be viewed via transaction /LOGWIN/SHOW_LOG
, after that you can transfer necessary log records to external repository (which you should set up in advance) by transaction /LOGWIN/TSF_TO_EXT
.
Architecture overview:
More documentation is here: