MSS_DB02_BCKP
Data Description
The MSS_DB02_BCKP event is used in SAP to analyze the database backup processes for a Microsoft SQL database.
Potential Use Cases
This event could be used in the following scenarios:
Alert on database backup failures
Dashboard on database backup history
Confirm last backup in case recovery is required.
Splunk Event
The event will look like this in Splunk:

SAP Navigation
Log into the managed system and execute the dbacockpit transaction code. Expand the options for the Backup and Recovery section and double-click the Backup History option on the left side. The information displayed will match the data that is extracted and sent to Splunk.
Note: No backups had been run recently on the database in the screenshot below, but this is where this information will be populated.

Field Mapping
Field | Description | Unit of Measure |
---|---|---|
1FAMILYNUM | MS SQL Server - Family num of media where the backup starts | Number |
BACKSETID | MS SQL server backup id for the backup task | Number |
BACKUPPOS | MS SQL Server - Backup set position | Number |
BACKUPTYPE | MS SQL server - Backup Type description | String |
CURRENT_TIMESTAMP | The date time stamp when the information was collected | YYYYMMDDHHMMSS |
DBNAME | Database name | String |
DESC1 | MS Sql Server - Backup media set description | String |
DESC2 | Description of the backup set | String |
END_DATE | MS SQL server backup finish date | YYYY-MM-DD HH:MM:SS |
EVENT_SUBTYPE | String | |
EVENT_TYPE | MSS_DB02_BCKP | String |
EXP_DATE | MS SQL server - backup expiration date | YYYY-MM-DD HH:MM:SS |
JOB_HIST | MS SQL job history | String |
JOB_ID | MS SQL server job id | Number |
MACHINENAM | MS SQL server - server name | String |
MEIDASETID | Backup media set id | Number |
NAME1 | MS sql server desciption of the nedia name. | String |
NAME2 | Name of the backup set | String |
SERVERNAM | MS SQL Server server to be used for a SQL task execution | String |
SFTNAME | MS SQL Server - Backup software Name | String |
START_DATE | MS SQL Server: Database starting time | YYYY-MM-DD HH:MM:SS |
TYPE | MS SQL server - backup type ( full, differential, log) | String |
UTCDIFF | The UTC OFFSSET in HHMMSS that the data was collected in | HHMMSS |
UTCSIGN | The UTC positive or negative OFFSET indicator. Positive (+) means add UTCDIFF to find the time zone of the data, negative (-) means subtract the UTCDIFF to find the time zone adjusted date time the data was collected in. | + | - |