Hi Rohit, please ensure you have implemented these SAP Security Notes in your system:
- 2190621 - SAP Netweaver SAL incorrect logging of addresses
- 2122391 - SAP Netweaver SAL incorrect logging in RFC functions
- 1497445 - SAL| Logging the IP address instead of the terminal name
Those 3 notes are related on how the Security Audit Log handles the "terminal" field, there are some issues around it that you need to fix.