Data Description

The SLICENSE event is used in SAP to manage system license keys.

Potential Use Cases

This event could be used in the following scenarios:

  • Alert on license key expirations or impending expiration dates.

  • Create a dashboard displaying current system license status.

Splunk Event

The event will look like this in Splunk:

SAP Navigation

Log into the managed system and execute the SLICENSE transaction. The information displayed will match the data that is extracted and sent to Splunk.

Field Mapping

Field

Description

Unit of Measure

ACTIVE

General Flag

Boolean

BEGIN_DATE

Start Date of a LIKEY License

YYYYMMDD

CURRENT_TIMESTAMP

The date time stamp when the information was collected

YYYYMMDDHHMMSS

END_DATE

End Date of a LIKEY License

YYYYMMDD

EVENT_SUBTYPE

LICENSES

String

EVENT_TYPE

SLICENSE

String

HWKEY

Hardware Key of a LIKEY License

String

INSTALL_NO

Installation Number of a LIKEY License

Number

LSC_DATE

Date of the Last Successful License Check

String

SID

System ID of a LIKEY License

Number

SW_PRODUCT

Software Product for Which a LIKEY License Was Issued

String

SW_PROD_LIMIT

Number of Users Permitted to Work with a LIKEY License

Number

SW_PROD_TEXT

Long Text for a Software Product

String

SYSTEM_NO

System Number of a LIKEY License

Number

TYPE

Type of LIKEY License

Boolean

UTCDIFF

The UTC OFFSSET in HHMMSS that the data was collected in

HHMMSS

UTCSIGN

The UTC positive or negative OFFSET indicator. Positive (+) means add UTCDIFF to find the time zone of the data, negative (-) means subtract the UTCDIFF to find the time zone adjusted date time the data was collected in.

+ | -

VALIDITY

Validity of a LIKEY License

Number