KB 185 - Automatic field extraction stopped after upgrading PowerConnect ABAP to 7.03

KB 185(ABAP) - Automatic field extraction stopped after upgrading PowerConnect ABAP to 7.03

Description

Field extractions don’t seem to be working once the PowerConnect ABAP component is upgraded to version 7.03 and you are seeing httpevent sourcetype in the index in which you are sending PowerConnect data to.

You are also seeing a spike in the amount of data ingested in Splunk from PowerConnect.

Cause

This issue occurs when the endpoint configuration (Transcation /bnwvs/main → Administrator → Splunk Setup → Upload Scheme) in PowerConnect points to the path http(s)://<splunk_host>:<443|8088>/services/collector/raw

Resolution

To fix the issue please remove the URI path /services/collector/raw from the endpoint configuration and restart the PowerConnect agent on the affected SAP system. The endpoint should look like below:

Product version