The SWI1 event is used in SAP as the selection report for workflows.
Potential Use Cases
This event could be used in the following scenarios:
Visualize workflows in a dashboard format.
Alert on workflow errors.
View or alert on delays in workflows for a specific process.
The event will look like this in Splunk:
Log into the managed system and execute the SWI1 transaction code. Then enter the desired data selection parameters, and select the Execute button.
The information displayed below will match the data that is extracted by Splunk.