Przemek,
That is a very good point that you make. I think there is a bug in the SM20N report. I will try to attach a picture of the output but essentially this is what I see in the output:
Severe and Critical highlighted in green
Only Critical highlighted in yellow
All hightlighted in red
From the main SM20 screen there is a drop down selection related to Events: All, Only Critical, Severe and Critical.. When I select Only Critical, all of the output records are highlighted in red AND the Security level field say All!!
Another example:
When I select Events Severe and Critical I get ouput of Only Critical and All!!
So, is this a problem with our installation or is this an SAP problem? SM20 and SM20N are system deliverd transactions right? It should work out of the box I assume? Is there some configuration or setup that needs to be looked at? In addition, we have 5 instances of SAP and in all 5 SM20 and SM20N behave in the same way.
When I select All events, what exactly does All mean?
Thank you for taking the time to respond to my question.
Mark