From: JH on
Our IT group is working on a project to gather logs from all
applications that access confidential health information. We have
many SAS data sets on a shared file server that have PHI fields in
them.

I looked at the SAS audit function, but 1) it doesn't track read
access (only updates) and 2) certain SAS steps can break the audit
trail.

Is there any SAS way to track this or do we need to look into an OS-
based way to do this?

Running Base + a few other packages, but no BI tools....
From: Patrick on
Hi

Log4SAS comes to mind:
http://support.sas.com/rnd/papers/sgf2008/logging.pdf

http://support.sas.com/documentation/cdl/en/logug/61514/HTML/default/viewer.htm#/documentation/cdl/en/logug/61514/HTML/default/a003251199.htm

HTH
Patrick