BookmarkSubscribeRSS Feed
NaamaGa
Calcite | Level 5

Hello,

What is the best option available to audit usage of SAS files and objects usage?

We have some "dark" areas in SAS server that we want to make sure nobody is using, before removing them.

Also, in case we see there is a usage in a SAS output file named A, how can we backtrack the origin and the program created this file? Are there any data lineage capabilities in SAS server?

Thank you

4 REPLIES 4
Kurt_Bremser
Super User

SAS files keep no record of who was opening them for read. You can only keep a trail of updates by using the audit trail, AFAIK.

If you have that problem, you best consult your operating system's documentation on auditing. AIX, for instance, has a strong auditing subsystem that allows one to track all file access events for a given set of files.

But be aware that such auditing may have a severe impact on the performance of your system. And needs lots of disk space.

jakarman
Barite | Level 11

APM is SAS specific SAS Audit, Performance and Measurement package These can by configured on SAS services (non not servers)

On the OS level you have full control as it done by SIEM projects. (Security Information &Event management).  This is done at server level.

---->-- ja karman --<-----
NaamaGa
Calcite | Level 5

Thank you. Does this package supports access audit to SAS output files?

What about data lineage?

jakarman
Barite | Level 11

The APM is meant the follow only thing as far seen by SAS processing.

You can follow everything as long the related event is audited. You are needing BI to analyse those events to you questions. In that you could solve data lineage. 

The whole auditing is based on ARM (log4j) using the bi-di server approach.

Using a SAS base-foundation Arm is part of that, although I do not know how to activate those extensive loggings.
Anyway the OS auditing should be always better. Unless you are using OS group-accounts not knowing who is who.    

Some weird idea of SAS it trying to overrule OS standards. ... no circumvention know to achieve that.

52078 - You can manipulate metadata-bound SAS data sets regardless of server authentication or permi...  Knowing this and you can have external SAS processing (eg your backups/DR, managed file transfers) those logging-events should be get correlated to get the data-lineage complete.

Do you have used DI for building processes the logical data linage is part of the metadata. 

Beware of dark areas as you should understand their functionality. One months quartely or even yearly jobs or event-based triggers can be really important. You will hardly see any usage. At the moment they are needed..... 

---->-- ja karman --<-----

sas-innovate-2024.png

Join us for SAS Innovate April 16-19 at the Aria in Las Vegas. Bring the team and save big with our group pricing for a limited time only.

Pre-conference courses and tutorials are filling up fast and are always a sellout. Register today to reserve your seat.

 

Register now!

How to Concatenate Values

Learn how use the CAT functions in SAS to join values from multiple variables into a single value.

Find more tutorials on the SAS Users YouTube channel.

Click image to register for webinarClick image to register for webinar

Classroom Training Available!

Select SAS Training centers are offering in-person courses. View upcoming courses for:

View all other training opportunities.

Discussion stats
  • 4 replies
  • 1088 views
  • 0 likes
  • 3 in conversation