Data Description
The E070 event is used in SAP to view the header and object level detail of requests or tasks associated with a transport.
Potential Use Cases
This event could be used for the following scenarios:
Confirm that tasks were successfully imported when the transport moved to production.
Correlate performance impacts with changes that were recently made in the environment.
Visualize changes that were moved as part of a release.
Splunk Event
E070 with EVENT_SUBTYPE=””
The event will look like this in Splunk:
E070 with EVENT_SUBTYPE=”E071”
The event will look like this in Splunk:
SAP Navigation
E070 with EVENT_SUBTYPE=””
Note: Note that the data is being extracted from the E070, E07T,and the E070M tables. Documented below is how to navigate to the tables in SAP using E070 as an example.
Navigate to the SE16 t-code in the managed system. Then add the value of E070 to the Table Name field, and execute.
Enter the desired selection criteria and execute the transaction.
The data below will match the values in Splunk.
E070 with EVENT_SUBTYPE=”E071”
Navigate to the SE16 t-code in the managed system. Then add the value of E071 to the Table Name field, and execute.
Enter the desired selection criteria and execute the transaction.
The data below will match the values in Splunk.
Field Mapping
E070 with EVENT_SUBTYPE=””
Field | Description | Unit of Measure |
---|---|---|
AS4DATE | Date of last change | YYYYMMDD |
AS4TEXT | Short description of repository objects | String |
AS4TIME | Time of last change | HHMMSS |
AS4USER | Owner of the request or task | String |
CURRENT_TIMESTAMP | The date time stamp when the information was collected | YYYYMMDDHHMMSS |
DEVCLASS | Package | String |
EVENT_SUBTYPE | String | |
EVENT_TYPE | E070 | String |
KORRDEV | Request or task category | String |
STRKORR | Higher level request | String |
TARDEVCL | Target package | String |
TARLAYER | Target transport layer | String |
TARSYSTEM | The target system where the transport will be imported | String |
TRFUNCTION | The type of request or task | String |
TRKORR | The request or task number associated with the transport | String |
TRSTATUS | Status of the request or task | String |
UTCDIFF | The UTC OFFSSET in HHMMSS that the data was collected in | HHMMSS |
UTCSIGN | The UTC positive or negative OFFSET indicator. Positive (+) means add UTCDIFF to find the time zone of the data, negative (-) means subtract the UTCDIFF to find the time zone adjusted date time the data was collected in. | + | - |
E070 with EVENT_SUBTYPE=”E071”
Field | Description | Unit of Measure |
---|---|---|
ACTIVITY | Activity that wrote the entry to the object list | String |
AS4POS | The dictionary line item | String |
CURRENT_TIMESTAMP | The date time stamp when the information was collected | YYYYMMDDHHMMSS |
EVENT_SUBTYPE | E071 | String |
EVENT_TYPE | E070 | String |
GENNUM | Language information for object entry in transport organizer | String |
LANG | Language key | String |
LOCKFLAG | Lock status or import status of an object entry | Numeric |
OBJECT | Object type | String |
OBJFUNC | Object function | String |
OBJ_NAME | Object name in object list | String |
PGMID | Program ID in requests and tasks | String |
TRKORR | The request or task number associated with the transport | String |
UTCDIFF | The UTC OFFSSET in HHMMSS that the data was collected in | HHMMSS |
UTCSIGN | The UTC positive or negative OFFSET indicator. Positive (+) means add UTCDIFF to find the time zone of the data, negative (-) means subtract the UTCDIFF to find the time zone adjusted date time the data was collected in. | + | - |