CDPOS (Draft)

Data Description

The CDPOS event is used in SAP to view the change documents associated with changes to a business object in the SAP system.

Potential Use Cases

This event could be used in the following scenarios:

• Identify and alert on changes, which could create compliance concerns

• Dashboard and alert on total change volume for specific critical tables.

Metric Filters

Important Note: Data will not be extracted until the Metric Filter is configured.

Log into the managed system, and execute the /n/bnwvs/main transaction. Then go to Administrator → Metric filters → Change doc. filter.

Splunk Event

CDPOS with EVENT_SUBTYPE=””

Important Note: Data will not be extracted until the Metric Filter is configured.

The event will look like this in Splunk:

CDPOS with EVENT_SUBTYPE=”CDPOS”

Important Note: Data will not be extracted until the Metric Filter is configured.

The event will look like this in Splunk:

SAP Navigation

CDPOS with EVENT_SUBTYPE=””

Important Note: Data will not be extracted until the Metric Filter is configured.

Log into the managed system, and execute the SE16 transaction code. Then enter CDPOS in the Table Name field, and hit the Enter key.

Then enter the desired user selection parameters, and hit the Execute button.

The information displayed will match the data that is extracted and sent to Splunk.

CDPOS with EVENT_SUBTYPE=”CDPOS”

Important Note: Data will not be extracted until the Metric Filter is configured.

Log into the managed system, and execute the SE16 transaction code. Then enter CDPOS in the Table Name field, and hit the Enter key.

Then enter the desired user selection parameters, and hit the Execute button.

The information displayed will match the data that is extracted and sent to Splunk.

Field Mapping

CDPOS with EVENT_SUBTYPE=””

CDPOS with EVENT_SUBTYPE=”CDPOS”