/
SM04

SM04

Data Description

The SM04 event is used in SAP to view users logged in.

Potential Use Cases

This event could be used in the following scenarios:

  • Identify potential security threats from user log-in events.

  • Trend user log-ins over time.

Splunk Event

The event will look like this in Splunk:

SAP Navigation

Log into the managed system and execute the SM04 transaction code. The data that is displayed will match the data that is extracted and sent to Splunk.

Related content