...
EVENT_SUBTYPE=INFO
...
EVENT_SUBTYPE=STAT
...
Field Mapping
The field mapping between the data from SAP and values in Splunk can be seen in the table below:
...
Group Definition/EVENT_TYPE
...
EVENT_SUBTYPE (if applicable)
...
SAP Field Name
...
Splunk Field Name
...
PC_HEALTH
...
INFO
...
N/A
...
DB_SYS
...
PC_HEALTH
...
INFO
...
N/A
...
EVENT_SUBTYPE
...
PC_HEALTH
...
INFO
...
N/A
...
EVENT_TYPE
...
PC_HEALTH
...
INFO
...
N/A
...
RELEASE_DATE
...
PC_HEALTH
...
INFO
...
N/A
...
RELEASE_NO
...
PC_HEALTH
...
INFO
...
N/A
...
USERS_GUI
...
PC_HEALTH
...
INFO
...
N/A
...
USERS_PLG
...
PC_HEALTH
...
INFO
...
N/A
...
USERS_RFC
...
PC_HEALTH
...
INFO
...
N/A
...
CURRENT_TIMESTAMP
...
PC_HEALTH
...
INFO
...
N/A
...
UTCDIFF
...
PC_HEALTH
...
INFO
...
N/A
...
UTCSIGN
...
PC_HEALTH
...
STAT
...
N/A
...
CURRENT_TIMESTAMP
...
PC_HEALTH
...
STAT
...
N/A
...
EVENT_SUBTYPE
...
PC_HEALTH
...
STAT
...
N/A
...
EVENT_TYPE
...
PC_HEALTH
...
STAT
...
N/A
...
IN_ERROR
...
PC_HEALTH
...
STAT
...
N/A
...
LAST_METRIC_DATE
...
PC_HEALTH
...
STAT
...
N/A
...
LAST_METRIC_TIME
...
PC_HEALTH
...
STAT
...
N/A
...
SENT
...
PC_HEALTH
...
STAT
...
N/A
...
TOTAL_TO_SEND
...
PC_HEALTH
...
STAT
...
N/A
...
TO_SEND
...
PC_HEALTH
...
STAT
...
N/A
...
TRGID
...
PC_HEALTH
...
STAT
...
N/A
...
TRGNAME
...
PC_HEALTH
...
STAT
...
N/A
...
UTCDIFF
...
PC_HEALTH
...
STAT
...
N/A
...
UTCSIGN