Data Description
The ORA_DB02_ALRT event is used in SAP to view alerts associated with the Oracle database.
Potential Use Cases
This event could be used in the following scenarios:
Alert on particular database alert messages.
Trend database errors over time.
Correlate database alert messages with events in the SAP application layer.
Splunk Event
The event will look like this in Splunk:
SAP Navigation
Log into the managed system and execute the dbacockpit transaction code. Then go to the Performance menu on the left side of the page and expand the menu option. Then find the Additional Features menu option under Performance and expand. Then double-click on the Alert Log.
Then entered the desired user selection parameters, followed by the Execute button, The information displayed will match the data that is extracted and sent to Splunk.
Field Mapping
Field | Description | Unit of Measure |
|---|---|---|
CLASS | Oracle alert log entry classification | Number |
COLOR | Color of the line to be displayed | String |
CURRENT_TIMESTAMP | The date time stamp when the information was collected | YYYYMMDDHHMMSS |
EVENT_SUBTYPE | String | |
EVENT_TYPE | ORA_DB02_ALRT | String |
INST_HN | Oracle monitoring: host_name | String |
INST_ID | Oracle monitor: Instance ID | Number |
INST_NM | Oracle monitoring: instance_name | String |
LINE | Single line of DBA log or profile | YYYY-MM-DDTHH:MM:SS.FFFFFF+Z |
ORANR | Oracle alert log ORA - message number | Number |
TS_DATE | Oracle alert log timestamp (date) | YYYYMMDD |
TS_TIME | Oracle alert log timestamp (time) | HHMMSS |
UTCDIFF | The UTC OFFSSET in HHMMSS that the data was collected in | HHMMSS |
UTCSIGN | The UTC positive or negative OFFSET indicator. Positive (+) means add UTCDIFF to find the time zone of the data, negative (-) means subtract the UTCDIFF to find the time zone adjusted date time the data was collected in. | + | - |
XALERT | Oracle alert log: Flag "current message log line is an alert" | Boolean |