The ORA_DB02_SESS event is used in SAP to check the Oracle session list and related resource information. In addition, you can see an execution plan and the SQL statement performed by a session. If a session performs an SQL statement from an ABAP program you can display the ABAP source.
Potential Use Cases
This event could be used in the following scenarios:
Alert on sessions utilizing excessive amounts of database resources
Identify SQL statement and ABAP code using the database resource to correlate back to SAP application data.
Create a dashboard to visualize database sessions.
The event will look like this in Splunk:
Log into the managed system and execute the dbacockpit transaction code. Then expand the Performance menu option on the left side of the screen, and then expand the Wait Event Analysis menu option. Double-click the Session Monitor option. The data displayed will match the data that is extracted and sent to Splunk.