Data Description

The PC_HEALTH is internal PowerConnect event (internally used by Splunk application). The event is distributed by the Extractor job, hence it is flowing into Splunk even when Uploader job is stopped.

EVENT_SUBTYPE=INFO

Contains the information about PowerConnect version, DB type and number of logged in users.

EVENT_SUBTYPE=STAT

Contains the metric queue status/health per each Splunk target.

Potential Use Cases

This event could be used for the following scenarios:

  • Visualize PowerConnect metric queue statistics over time

  • Alert when metric queue is growing

  • PowerConnect/Splunk troubleshooting

  • Determine system DB type

Splunk events

Events will look like this in Splunk:

EVENT_SUBTYPE=INFO

EVENT_SUBTYPE=STAT

Field Mapping

The field mapping between the data from SAP and values in Splunk can be seen in the table below:

Group Definition/EVENT_TYPE

EVENT_SUBTYPE (if applicable)

SAP Field Name

Splunk Field Name

PC_HEALTH

INFO

N/A

DB_SYS

PC_HEALTH

INFO

N/A

EVENT_SUBTYPE

PC_HEALTH

INFO

N/A

EVENT_TYPE

PC_HEALTH

INFO

N/A

RELEASE_DATE

PC_HEALTH

INFO

N/A

RELEASE_NO

PC_HEALTH

INFO

N/A

USERS_GUI

PC_HEALTH

INFO

N/A

USERS_PLG

PC_HEALTH

INFO

N/A

USERS_RFC

PC_HEALTH

INFO

N/A

CURRENT_TIMESTAMP

PC_HEALTH

INFO

N/A

UTCDIFF

PC_HEALTH

INFO

N/A

UTCSIGN

PC_HEALTH

STAT

N/A

CURRENT_TIMESTAMP

PC_HEALTH

STAT

N/A

EVENT_SUBTYPE

PC_HEALTH

STAT

N/A

EVENT_TYPE

PC_HEALTH

STAT

N/A

IN_ERROR

PC_HEALTH

STAT

N/A

LAST_METRIC_DATE

PC_HEALTH

STAT

N/A

LAST_METRIC_TIME

PC_HEALTH

STAT

N/A

SENT

PC_HEALTH

STAT

N/A

TOTAL_TO_SEND

PC_HEALTH

STAT

N/A

TO_SEND

PC_HEALTH

STAT

N/A

TRGID

PC_HEALTH

STAT

N/A

TRGNAME

PC_HEALTH

STAT

N/A

UTCDIFF

PC_HEALTH

STAT

N/A

UTCSIGN