Data Description

The E070 event is used in SAP to view the header and object level detail of requests or tasks associated with a transport.

Potential Use Cases

This event could be used for the following scenarios:

Splunk Event

E070 with EVENT_SUBTYPE=””

The event will look like this in Splunk:

E070 with EVENT_SUBTYPE=”E071”

The event will look like this in Splunk:

SAP Navigation

E070 with EVENT_SUBTYPE=””

Note: Note that the data is being extracted from the E070, E07T,and the E070M tables. Documented below is how to navigate to the tables in SAP using E070 as an example.

Navigate to the SE16 t-code in the managed system. Then add the value of E070 to the Table Name field, and execute.

Enter the desired selection criteria and execute the transaction.

The data below will match the values in Splunk.

E070 with EVENT_SUBTYPE=”E071”

Navigate to the SE16 t-code in the managed system. Then add the value of E071 to the Table Name field, and execute.

Enter the desired selection criteria and execute the transaction.

The data below will match the values in Splunk.