Data Description

The MSS_DB02_OVFL event is used in SAP to view the size of specific database files for a Microsoft SQL database.

Potential Use Cases

This event could be used in the following scenarios:

  • Dashboard storage use over time.

  • Alert when specific files on the database are filling.

Splunk Event

The event will look like this in Splunk:

SAP Navigation

Log into the managed system and execute the dbacockpit transaction code. Then expand the Space menu option on the left side of the screen and double-click the Overview option. Then click on Files tab that appears in the center of the screen. The information shown will match the data that is extracted and sent to Splunk.

Field Mapping

Field

Description

Unit of Measure

ALERTSTATUS

ALERT Status , 'R','Y','G' - red,yellow,green

String

ALLOCMB

Allocated space in a DB file in MB

Number

CURRENT_TIMESTAMP

The date time stamp when the information was collected

YYYYMMDDHHMMSS

DEVFREEMB

Free space left on file system (partition) in MB.

Number

EVENT_SUBTYPE

String

EVENT_TYPE

MSS_DB02_OVFL

String

FILEGRPNA

Filegroup name

String

FILEID

FILE ID of DB file for SQL Server

Number

FILEMSG

MSS Alert Text as seen in RZ20

String

FLMAXSIZE

File size limit in MB configured in SQL Server.

Number

FLSIZEMB

File size in MB.

Number

FREEPCT

Free percentage of space in a SQL Server file

Number (Percent)

GROWTH

File growth step configured in SQL Server.

Number

GROWTHMB

True file growth in MB

Number

GRWTHPCT

SQL Server file has growth represented in percentage

Boolean

LOGDEV

file is a log file

Boolean

LOGFILENA

Logical file name

String

OBJ_DB

Database name

String

OBJ_SCHEMA

Schema name

String

PHYFILENA

Physical file name (full path) of the database file.

String

PRIMARYFILE

Primary file containing startup information and also data

Boolean

READONLY

The file group is read only

Boolean

UTCDIFF

The UTC OFFSSET in HHMMSS that the data was collected in

HHMMSS

UTCSIGN

The UTC positive or negative OFFSET indicator. Positive (+) means add UTCDIFF to find the time zone of the data, negative (-) means subtract the UTCDIFF to find the time zone adjusted date time the data was collected in.

+ | -