Data Description

The SE37_LOG event is used to identify who has executed Function Modules using SE37 Transaction.

Potential Use Cases

This event could be used for the following scenarios:

  • Determine which Function Modules are executed using SE37 transaction.

  • In Development/Quality SAP Systems, can be used to determine if Remote Function Modules are executed on Production Systems

  • Identify and alert by sensitive Function Modules Names/User etc., which could create compliance concerns

Splunk Event

The event will look like this in Splunk: