haven SAP Security
Browse knowledge
Knowledge base
TRACES / SECURITY BASELINE

Sensitive data in HANA traces

Restrict tracing to avoid recording query results during normal operations.

Risk

Diagnostic files can contain business data and become an additional disclosure channel.

HANA

Settings and priorities

Technology / priorityParameter or mechanismSetting and purpose
HANA
Critical
indexserver.ini · sqltrace · levelNot ALL_WITH_RESULTS
Avoids recording SQL results during normal operations.

How to verify

  1. Check the SQL trace level.
  2. Review who can change trace settings and read trace files.
  3. Restore the approved logging level after troubleshooting.

Related topics

Audit and monitoring ↗

Baseline priorities and implementation ↗