Data Description

The MSS_DB02_BCKP event is used in SAP to analyze the database backup processes for a Microsoft SQL database.

Potential Use Cases

This event could be used in the following scenarios:

  • Alert on database backup failures

  • Dashboard on database backup history

  • Confirm last backup in case recovery is required.

Splunk Event

The event will look like this in Splunk:

SAP Navigation

Log into the managed system and execute the dbacockpit transaction code. Expand the options for the Backup and Recovery section and double-click the Backup History option on the left side. The information displayed will match the data that is extracted and sent to Splunk.

Note: No backups had been run recently on the database in the screenshot below, but this is where this information will be populated.

Field Mapping

Field

Description

Unit of Measure

1FAMILYNUM

MS SQL Server - Family num of media where the backup starts

Number

BACKSETID

MS SQL server backup id for the backup task

Number

BACKUPPOS

MS SQL Server - Backup set position

Number

BACKUPTYPE

MS SQL server - Backup Type description

String

CURRENT_TIMESTAMP

The date time stamp when the information was collected

YYYYMMDDHHMMSS

DBNAME

Database name

String

DESC1

MS Sql Server -  Backup media set description

String

DESC2

Description of the backup set

String

END_DATE

MS SQL server backup finish date

YYYY-MM-DD HH:MM:SS

EVENT_SUBTYPE

String

EVENT_TYPE

MSS_DB02_BCKP

String

EXP_DATE

MS SQL server - backup expiration date

YYYY-MM-DD HH:MM:SS

JOB_HIST

MS SQL job history

String

JOB_ID

MS SQL server job id

Number

MACHINENAM

MS SQL server - server name

String

MEIDASETID

Backup media set id

Number

NAME1

MS sql server desciption of the nedia name.

String

NAME2

Name of the backup set

String

SERVERNAM

MS SQL Server server to be used for a SQL task execution

String

SFTNAME

MS SQL Server - Backup software Name

String

START_DATE

MS SQL Server: Database starting time

YYYY-MM-DD HH:MM:SS

TYPE

MS SQL server - backup type ( full, differential, log)

String

UTCDIFF

The UTC OFFSSET in HHMMSS that the data was collected in

HHMMSS

UTCSIGN

The UTC positive or negative OFFSET indicator. Positive (+) means add UTCDIFF to find the time zone of the data, negative (-) means subtract the UTCDIFF to find the time zone adjusted date time the data was collected in.

+ | -