SM13
Data Description
The SM13 event is used in SAP to administrate update records.
Potential Use Cases
This event could be used in the following scenarios:
Alert on update errors.
Correlate the update entries with enqueue locks.
Dashboard update entries over time.
Splunk Event
The event will look like this in Splunk:
![](../__attachments/3054469185/image-20210409-175422.png?inst-v=2e21a6c8-3d81-4f24-ad4a-388097f52ca1)
SAP Navigation
Log into the managed system and execute the SM13 transaction. Enter the desired user selection parameters, and select the Execute button.
![](../__attachments/3054469185/image-20210409-185900.png?inst-v=2e21a6c8-3d81-4f24-ad4a-388097f52ca1)
Then select the record of interest and then the Details button.
![](../__attachments/3054469185/image-20210409-193901.png?inst-v=2e21a6c8-3d81-4f24-ad4a-388097f52ca1)
Double-click one of the entries from the screen.
![](../__attachments/3054469185/image-20210409-194039.png?inst-v=2e21a6c8-3d81-4f24-ad4a-388097f52ca1)
Select the Update Header button.
![](../__attachments/3054469185/image-20210409-194242.png?inst-v=2e21a6c8-3d81-4f24-ad4a-388097f52ca1)
The information displayed is the remaining information extracted by Splunk.
![](../__attachments/3054469185/image-20210409-194301.png?inst-v=2e21a6c8-3d81-4f24-ad4a-388097f52ca1)