Data Description

The E070 event is used in SAP to view the header and object level detail of requests or tasks associated with a transport.

Potential Use Cases

This event could be used for the following scenarios:

  • Confirm that tasks were successfully imported when the transport moved to production.

  • Correlate performance impacts with changes that were recently made in the environment.

  • Visualize changes that were moved as part of a release.

Splunk Event

E070 with EVENT_SUBTYPE=””

The event will look like this in Splunk:

E070 with EVENT_SUBTYPE=”E071”

The event will look like this in Splunk:

SAP Navigation

E070 with EVENT_SUBTYPE=””

Note: Note that the data is being extracted from the E070, E07T,and the E070M tables. Documented below is how to navigate to the tables in SAP using E070 as an example.

Navigate to the SE16 t-code in the managed system. Then add the value of E070 to the Table Name field, and execute.

Enter the desired selection criteria and execute the transaction.

The data below will match the values in Splunk.

E070 with EVENT_SUBTYPE=”E071”

Navigate to the SE16 t-code in the managed system. Then add the value of E071 to the Table Name field, and execute.

Enter the desired selection criteria and execute the transaction.

The data below will match the values in Splunk.

Field Mapping

E070 with EVENT_SUBTYPE=””

Field

Description

Unit of Measure

AS4DATE

Date of last change

YYYYMMDD

AS4TEXT

Short description of repository objects

String

AS4TIME

Time of last change

HHMMSS

AS4USER

Owner of the request or task

String

CURRENT_TIMESTAMP

The date time stamp when the information was collected

YYYYMMDDHHMMSS

DEVCLASS

Package

String

EVENT_SUBTYPE

String

EVENT_TYPE

E070

String

KORRDEV

Request or task category

String

STRKORR

Higher level request

String

TARDEVCL

Target package

String

TARLAYER

Target transport layer

String

TARSYSTEM

The target system where the transport will be imported

String

TRFUNCTION

The type of request or task

String

TRKORR

The request or task number associated with the transport

String

TRSTATUS

Status of the request or task

String

UTCDIFF

The UTC OFFSSET in HHMMSS that the data was collected in

HHMMSS

UTCSIGN

The UTC positive or negative OFFSET indicator. Positive (+) means add UTCDIFF to find the time zone of the data, negative (-) means subtract the UTCDIFF to find the time zone adjusted date time the data was collected in.

+ | -

E070 with EVENT_SUBTYPE=”E071”

Field

Description

Unit of Measure

ACTIVITY

Activity that wrote the entry to the object list

String

AS4POS

The dictionary line item

String

CURRENT_TIMESTAMP

The date time stamp when the information was collected

YYYYMMDDHHMMSS

EVENT_SUBTYPE

E071

String

EVENT_TYPE

E070

String

GENNUM

Language information for object entry in transport organizer

String

LANG

Language key

String

LOCKFLAG

Lock status or import status of an object entry

Numeric

OBJECT

Object type

String

OBJFUNC

Object function

String

OBJ_NAME

Object name in object list

String

PGMID

Program ID in requests and tasks

String

TRKORR

The request or task number associated with the transport

String

UTCDIFF

The UTC OFFSSET in HHMMSS that the data was collected in

HHMMSS

UTCSIGN

The UTC positive or negative OFFSET indicator. Positive (+) means add UTCDIFF to find the time zone of the data, negative (-) means subtract the UTCDIFF to find the time zone adjusted date time the data was collected in.

+ | -