Data Description
The STSMS event is used in SAP to view transports that were imported into the environment.
Potential Use Cases
This event could be used in the following scenarios:
Dashboard displaying transports that were recently imported into the system.
Correlate system changes with performance or security concerns.
Create alerts on transport errors.
Correlate transports with their associated tasks in environment.
Splunk Event
STMS with EVENT_SUBTYPE=””
The event will look like this in Splunk:
STMS with EVENT_SUBTYPE=”COFILE”
The event will look like this in Splunk:
SAP Navigation
Log into the managed system, and execute the STMS transaction code. Then select the Import Overview icon.
Then double-click the desired system that you would like to view.
Field Mapping
STMS with EVENT_SUBTYPE=””
Field | Description | Unit of Measure |
---|---|---|
ADMIN | Last Changed by | String |
ALLCLI | General Flag | Boolean |
CURRENT_TIMESTAMP | The date time stamp when the information was collected | YYYYMMDDHHMMSS |
DOMAIN | Domain Name | String |
EVENT_SUBTYPE | String | |
EVENT_TYPE | STMS | String |
HOST | Application Server | String |
LINESEQUENCE | Line number within file | Number |
PRESYSTEM | Target system for request | String |
PROJECT | Request/Task | String |
RETCODE | Return code | Number |
TARSYSTEM | Target system for request | String |
TPSTAT_KEY | tp Time Stamp | YYYYMMDDHHMMSS |
TRCLI | Source client of request | String |
TRKORR | Request/Task | String |
TRSTEP | tp Step | String |
TRTIME | Time Stamp in CTS | YYYYMMDDHHMMSS |
TRUSER | Last Changed by | String |
UTCDIFF | The UTC OFFSSET in HHMMSS that the data was collected in | HHMMSS |
UTCSIGN | The UTC positive or negative OFFSET indicator. Positive (+) means add UTCDIFF to find the time zone of the data, negative (-) means subtract the UTCDIFF to find the time zone adjusted date time the data was collected in. | + | - |
STMS with EVENT_SUBTYPE=”COFILE”
Field | Description | Unit of Measure |
---|---|---|
CURRENT_TIMESTAMP | The date time stamp when the information was collected | YYYYMMDDHHMMSS |
DELFLAG | Character field of length 1 | Boolean |
EVENT_SUBTYPE | COFILE | String |
EVENT_TYPE | STMS | String |
FUNCTION | Possible functions for batch ABAP transport procedure | String |
HOST | Application Server | String |
LINEOFFILE | Dictionary: Line item | Number |
OSUSER | UNIX user name | String |
RETCODE | Counter in Transport Organizer | Number |
TARCLIENT | Target client for the request | String |
TARSYSTEM | Target system of a request | String |
TRDATE | Date of Last Change | YYYYMMDD |
TRKORR | Request/Task | String |
TRTIME | Last changed at | HHMMSS |
UTCDIFF | The UTC OFFSSET in HHMMSS that the data was collected in | HHMMSS |
UTCSIGN | The UTC positive or negative OFFSET indicator. Positive (+) means add UTCDIFF to find the time zone of the data, negative (-) means subtract the UTCDIFF to find the time zone adjusted date time the data was collected in. | + | - |