Page Comparison

...

 Logs of interest for SAP SCC

There could be many logs /metrics of interest in terms for SCC to push to Splunk. You can find such logs in the location below by default. Please note that your installation folder may be different from the default

...

Linux                   : Default path is “/opt/sap/scc/log”

Additional Hints

1. You can ensure that only the files with filenames ending with “.log” is sent to Splunk by adding a whitelist in your forwarders inputs.conf. Below is an example

   Code Block
   [monitor:///opt/sap/scc/log] whitelist = \.log

2. You should also ensure that the splunk user has access to read the logs in the location mentioned above. In Linux systems for example, this can be achieved by adding the splunk user to the same group that has access to the logs in /opt/sap/scc/log or by adding additional permissions to files and directories in its path using setfacl command.