Overview

Details

PowerConnect Consists of two primary components: An SAP add-on that is installed within your SAP environment and The Splunk app (listed on this page)

PowerConnect - SAP Add-On: Sold via SoftwareOne, Splunk, and numerous other resell agents. The PowerConnect Add-On is an SAP certified software that installs into NetWeaver ABAP, S/4 HANA, NetWeaver Java, SAP Cloud Platform or TomCat Java based SAP systems and uploads events directly to Splunk Enterprise or Splunk Cloud in real time.

PowerConnect - Splunk Application: This Splunk powered application provides functionality for visualizing, monitoring, and managing SAP systems. This application requires data ingestion from SAP which is facilitated by an SAP Netweaver based technology add-on called "PowerConnect for SAP Solutions"

SAP PowerConnect for Splunk

OVERVIEW

This Splunk application helps in visualizing and monitoring SAP systems with PowerConnect for Splunk ABAP based application for SAP. This application requires data ingestion from SAP which is facilitated by an SAP Netweaver based technology add-on called "PowerConnect for SAP & Splunk".

Author - SoftwareONE
Version - 7.2.0
Build - 1
Creates Index - False
Source type - sap_abap, sap:abap, jmx, sap:java, sap:cloud
Compatible with:
- Splunk Enterprise version: 8.1.x, 8.2.x and 9.0.x
- PowerConnect for Splunk using ABAP: 7.01 - 7.5x
- OS: Platform independent

SUPPORT

support@powerconnect.io

DOWNLOAD

https://splunkbase.splunk.com/app/3153/

INSTALLATION

This application needs to be installed on Splunk Search Head in the case of Distributed environment.
For Installation and Setup instructions- https://help.powerconnect.io/powerconnectdocumentation/PowerConnect-Splunk-App-Installation.2349793211.html

UPGRADE STEPS

If you upgrade the app to 7.0.0 or above version from any lower version please run the Setup Page so that you can use the panel wise alert functionality.
https://help.powerconnect.io/powerconnectdocumentation/PowerConnect-Splunk-App-Upgrade.3040673830.html

APP DEPENDENCY

The app makes use of a Splunk application "Splunk Machine Learning Toolkit(MLTK)" to incorporate machine learning usecases in certain dashboards, namely "SAP Security Essentials" and "ABAP Dumps"

SETUP PAGE GUIDE

Section 1: Setup default values

In this section default filter values for the timerange and span can be set. These values are set to default across all the dashboards.
Note: This does not apply for "Expensive Statements (raw)" dashboards for databases.

Section 2: Database selection

In this section you can add/remove database menu entry from the navigation bar of the App.

Section 3: SAP Cloud selection

In this section you can add/remove SAP Cloud product menu entry from the navigation bar of the App.

Section 4: SAP Fiori selection

In this section you can add/remove SAP Fiori menu entry from the navigation bar of the App.

CONFIGURATION

After performing above mentioned installation steps, configure the indexes to be accessible by admin and all other users and roles who will be accessing this application.
All SAP raw events are configured to provide TIMESTAMPs in UTC timezone. Configure the system and Splunk user timezone accordingly.
If any new field extraction is required to be done in props.conf for the [sap_abap] stanza, please verify the application is not affected by that change.
The Lookups need to be populated with the event data. This step is required to be performed only once as there are separate savedsearches scheduled to run every hour for appending new items to existing lookups from new events and for some cases it’s only to populate static data in the lookup for once only. There are two ways to complete this step:
- Open the dashboard “Wizard for New SAP SIDs and Instances Discovery” under PowerConnect menu. Select the checkbox corresponding to the savedsearches name and click on the “Run Searches” button. The status of the search would get updated in the Status column of the table and the user can view the search results once the search has completed by clicking in the table cell. The step would be complete when all the searches specified in the table have completed execution successfully with the exception of “Cloud CPI Source - Lookup Gen - Run Once Only” search. This search should only be run if the user wants to use the “SAP Cloud - CPI Message Monitoring” dashboard.
- On Splunk's menu bar, Click on Settings -> “Searches, reports, and alerts” and manually run all the savedsearches with the suffix ” – Run Once Only”. In case of a large number of events, if savedsearch execution does not get completed, try to reduce the time range and populate the lookups.

OPTIONAL CONFIGURATION

SAP CLOUD PRODUCT SUPPORT
- If the user wants to use “SAP Cloud - CPI Message Monitoring” dashboard, the user needs to enable the saved search “Cloud CPI Source - Lookup Gen”. The steps to enable the savedsearches are:
  - On Splunk's menu bar, Click on Settings -> Searches, reports, and alerts.
  - Search for “Cloud CPI Source - Lookup Gen”.
  - Click on "Edit" dropdown under "Actions" and click on "Enable".
GERMAN OR JAPANESE LANGUAGE SUPPORT
- The app version 6.4.0 and onwards supports German and Japanese languages apart from English.
- By default, Splunk automatically uses the language that the user's browser is set to. To switch languages, either the browser's locale setting can be changed or for a given Splunk session it can be changed by modifying the URL that you use to access Splunk. For different languages use the URL as specified:
  - German : http://<your_splunk_instance_address>/de-DE/app/BNW-app-powerconnect/
  - Japanese: http://<your_splunk_instance_address>/ja-JP/app/BNW-app-powerconnect/
  - American English: http://<your_splunk_instance_address>/en-US/app/BNW-app-powerconnect/
  - British English: http://<your_splunk_instance_address>/en-GB/app/BNW-app-powerconnect/
  *(Replace the placeholder in the URL)
  Note: In case the dashboard is not getting shown in the expected language after going to the appropriate URL, the user should clear the browser cache and refresh the dashboard.
  * The language translation of description ("Wizard for New SAP SIDs and Instances Discovery" dashboard, "Data Dictionary" dashboard and "Searches, Reports, and Alerts" section) is supported for Splunk version 7.3.x and above.
  * Reference: https://docs.splunk.com/Documentation/Splunk/8.0.6/Admin/Userlanguageandlocale
MACROS:
- On Splunk's menu bar, Click on Settings -> “Advanced search” -> “Search Macros”.
- Click on the “sap-index” macro and mention the index name in the Definition where data is incoming. Please see the sample below:
  - (index="main" OR index="sample1" OR index="sample2")
  - Note: For selecting all value of an entity, "*" (asterisk) can be used. Logical operators like "AND", "OR" should be capitalized when used in Definition.
- Click on the Save Button.

DATA MODEL CONFIGURATION

Data Model Acceleration is disabled by default. Admin can enable acceleration and set the acceleration period by the following steps:
1. On Splunk's menu bar, Click on Settings -> Data models
2. From the list for Data models, click "Edit" in the "Action" column of the row for the Data model for which acceleration needs to be enabled.
3. From the list of actions select Edit Acceleration. This will display the pop-up menu for Edit Acceleration.
4. Check Accelerate check box to "Enable" data model acceleration.
5. If acceleration is enabled, select the summary range to specify the acceleration period.
6. To save acceleration changes click on the save button.
For additional details, please refer the following document:
https://help.powerconnect.io/powerconnectdocumentation/KB-96---Splunk-PowerConnect-App-Data-Model-Information.3076489217.html

REBUILDING DATA MODEL

In case there is no need to use the already indexed accelerated Data Model, the Data Model can be configured to rebuild from scratch for the specified acceleration period. Data Model can be rebuilt by the following steps:
1. On Splunk's menu bar, Click on Settings -> Data models
2. From the list for Data models, expand the row by clicking ">" arrow in the first column of the row for the Data model for which acceleration needs to be rebuild. This will display an extra Data Model information in "Acceleration" section.
3. From the "Acceleration" section click on "Rebuild" link.
4. Monitor the status of the rebuild in the field "Status" of "Acceleration" section. Reload the page to get the latest rebuild status.

SAVEDSEARCHES

"System Inventory" saved search is used to populate Time, CPU, Memory, Capacity in dashboards.
Below savedsearches are accelerated and acceleration might increase storage and processing costs. The user can change the acceleration option by following the steps given at the end of the section.
1. Global STAD - Database Time, Response Time & Network Time
2. SAP_stad_get_userlist
Below savedsearches are used in Dropdown population in all dashboards.
1. summaryAccountInstance
2. summaryAccountSource
3. summaryInstanceId
4. summarySourceId
5. summaryTcodeInstance
6. summaryTcodeSource
7. summaryTypeInstance
8. summaryTypeSource
9. summaryJmxSourceId
10. summaryJmxStatus
11. summaryFilenames
12. summaryCloudCPISourceId
13. summaryCloudAPISourceId
14. summaryCloudSuccessFactorSourceId
15. summarySystemRole
"landscape_overview_summary" saved search is used to populate lookups for the Landscape Overview Dashboard.
"landscape_overview_lookup_clean" saved search is used to Remove lookups data which is used in Landscape Overview Dashboard.
The following saved searches are used to populate lookups for the Process Chain Dashboard. These are disabled by default. Users need to manually enable these to use the dashboard.
1. Sap_Subchain_Hour_Relation
2. sap_state_step_chain - Lookup Gen
3. sap_state_step_chain - Lookup Gen (Month Reset)
4. Avg_Process_Chain
5. Avg_Process_Chain2
6. Next_Start_Process_Chain
7. Sap_Process_Chain_Status_Duration
8. sub_subchain_hour_relation_lookup - Lookup Gen
The steps to enable the savedsearches are:
1. On Splunk's menu bar, Click on Settings -> Searches, reports, and alerts.
2. Select App context="SAP PowerConnect for Splunk (BNW-app-powerconnect)" and mark check "Show only objects created in this app context".
3. Click on "Edit" dropdown under "Actions" and click on "Enable".
The following saved searches are used to improve the search performance for the MLTK panels by acceleration. By default this feature is disabled. Users need to manually enable the acceleration.
1. "mltk_sap_security_essentials_anomaly_tcode" - For the "Anomaly Detection: T-Code Executions" panel present in SAP Security Essentials dashboard.
2. "mltk_sap_security_essentials_forecast_logins" - For the "Forecasting: User Logins" panel present in SAP Security Essentials dashboard.
3. "mltk_abap_dumps_forecast_dumps" - For the "Forecasting: ABAP dumps" panel present in ABAP Dumps dashboard.
4. "mltk_st22_anomaly" - For the "ABAP Dumps Outlier" panel present in ABAP Dumps dashboard.
5. "mltk_sm37_anomaly" - For the "SAP Batch Jobs Anomaly" panel present in Batch Jobs dashboard.
Users can change the acceleration option by following the below steps:
1. On Splunk's menu bar, Click on Settings -> Searches, reports, and alerts.
2. Select App context="SAP PowerConnect for Splunk (BNW-app-powerconnect)" and mark check "Show only objects created in this app context".
3. Click on "Edit" dropdown under "Actions" and click on "Edit Acceleration" for the savedsearch you want to enable acceleration for.
4. Under the Acceleration label, you will find "Accelerate this search" check box.
5. By making a check / uncheck "Accelerate Report" check box, the acceleration option of savedsearch will be enabled/disabled.
6. Click on "Save".

KNOWN ISSUES

https://help.powerconnect.io/powerconnectdocumentation/release-notes-for-splunk-app-v7-0-0#ReleaseNotesforSplunkAppv7.0.0-KnownIssues

SEND DATA TO SPLUNK

PowerConnect uses and recommends to use HTTP Event Collector(HEC) to send data to Splunk.

OPEN SOURCE COMPONENTS AND LICENSES

Some of the components included in "SAP PowerConnect for Splunk" are licensed under free or open source licenses. We wish to thank the contributors to those projects.
jQuery version 2.1.0 http://jquery.com/ (LICENSE https://github.com/jquery/jquery/blob/master/LICENSE.txt)
Underscore JS version 1.6.0 http://underscorejs.org (LICENSE https://github.com/jashkenas/underscore/blob/master/LICENSE)
Require JS version 2.1.15 http://github.com/jrburke/requirejs (LICENSE https://github.com/requirejs/requirejs/blob/master/LICENSE)
D3 JS version 3.3.5 https://github.com/d3/d3/releases (LICENSE appserver/static/components/d3/LICENSE)
Gantt Chart components from Splunk app "Gantt Chart visualization" 1.3.5 https://splunkbase.splunk.com/app/1741/ (LICENSE http://www.gnu.org/licenses/gpl-3.0.txt)
Plotly JS version 1.49.4 https://github.com/plotly/plotly.js/releases (LICENSE appserver/static/components/scatterplot/LICENSE.txt)
Golden Layout version 1.5.9 https://github.com/golden-layout/golden-layout/releases (LICENSE appserver/static/components/goldenlayout/LICENSE.txt)
Font Awesome Free 5.2.0 by @fontawesome - https://fontawesome.com/ (LICENSE appserver/static/icons/LICENSE.txt)

BINARY FILES

The app package uses binary files for NIPING utility (located at $SPLUNK_HOME$/etc/apps/BNW-app-powerconnect/bin/lib/nipping)

LOOKUP FILE MANUAL CONFIGURATION

In "SAP Performance->User Experience (Geo)" dashboard, ip_subnets lookup file is used for fetching predefined subnet, lat, long and text fields. On the basis of these fields, the panel will display bubbles on Geo Map.

To make "SAP Global->User Experience (Geo)" dashboard working properly, the user needs to manually insert subnet values in ip_subnets lookup file ($SPLUNK_HOME$/etc/apps/BNW-app-powerconnect/lookups/ip_subnets.csv).

For example:
subnet,lat,long,text // this line is already in ip_subnets.csv file.
XXX.XXX.XXX,-10.000,20.000,"Text Value" //Sample value in ip_subnets.csv file.
.
.
.
    where,
        - "XXX.XXX.XXX" is subnet value.
        - "-10.000" is latitude.
        - "20.000" is longitude.
        - "Text Value" is identical city/state/state name.

In "SAP Security->SAP Security Scorecard" and "SAP Security->SAP Security Essentials" dashboards, security_parameters_names lookup file is used for one of the security use case "Password policy parameters". On the basis of this lookup "Password policy parameters" security use case is defined.

To modify this security use case, user need to manually add/modify security_parameters_names lookup file ($SPLUNK_HOME$/etc/apps/BNW-app-powerconnect/lookups/security_parameters_names.csv).

For example:
PAR_NAME,RECOMMENDED_VALUE,CONDITION // this line is already in ip_subnets.csv file.
login/min_password_lng,6,> //Sample value in security_parameters_names.csv file.
.
.
.
    where,
        - "login/min_password_lng" is parameter name.
        - "6" is recommended value.
        - ">" is one of the three possible conditions i.e ">" OR "<" OR "=".

In "SAP Security->SAP Security Scorecard" and "SAP Security->SAP Security Essentials" dashboards, sensitive_tcodes lookup file is used for one of the security use case "Execution of sensitive transactions". On the basis of this lookup "Execution of sensitive transactions" security use case is defined.

To modify this security use case, user need to manually add/modify sensitive_tcodes lookup file ($SPLUNK_HOME$/etc/apps/BNW-app-powerconnect/lookups/sensitive_tcodes.csv).

For example:
TCODE // this line is already in sensitive_tcodes.csv file.
SE16 //Sample value in sensitive_tcodes.csv file.
.
.
.
    where,
        - "SE16" is sensitive TCODE value.

In "SAP Security->SAP Security Scorecard" and "SAP Security->SAP Security Essentials" dashboards, wide_open_auth_objects lookup file is used for one of the security use case "Users with sensitive authorization". On the basis of this lookup "Users with sensitive authorization" security use case is defined.

To modify this security use case, user need to manually add/modify wide_open_auth_objects lookup file ($SPLUNK_HOME$/etc/apps/BNW-app-powerconnect/lookups/wide_open_auth_objects.csv).

For example:
OBJECT // this line is already in wide_open_auth_objects.csv file.
S_TABU_DIS //Sample value in wide_open_auth_objects.csv file.
.
.
.
    where,
        - "S_TABU_DIS" is object value.

In "SAP Security->SAP Security Scorecard" and "SAP Security->SAP Security Essentials" dashboards, sensitive_user_roles lookup file is used for one of the security use case "Users with sensitive role". On the basis of this lookup "Users with sensitive role" security use case is defined.

To modify this security use case, user need to manually add/modify sensitive_user_roles lookup file ($SPLUNK_HOME$/etc/apps/BNW-app-powerconnect/lookups/sensitive_user_roles.csv).

For example:
AGR_NAME // this line is already in sensitive_user_roles.csv file.
Z_BNWVS_ADMIN_CHANGE //Sample value in sensitive_user_roles.csv file.
.
.
.
    where,
        - "Z_BNWVS_ADMIN_CHANGE" is rule name.

In "Java->NW->NetWeaver Java UME" dashboard, sensitive_user_roles_java lookup file is used for one of the security use case "Users with sensitive role". On the basis of this lookup "Users with sensitive role" security use case is defined.
To modify this security use case, user need to manually add/modify sensitive_user_roles_java lookup file ($SPLUNK_HOME$/etc/apps/BNW-app-powerconnect/lookups/sensitive_user_roles_java.csv).
```
For example:
role_name // this line is already in sensitive_user_roles.csv file.
Administrator //Sample value in sensitive_user_roles.csv file.
.
.
.
    where,
        - "Administrator" is rule name.
```
- In "PowerConnect->Landscape Overview" dashboard, pc_landscape_ovw_source_exclude lookup file is used to exculde the systems from the "ABAP System" and "JAVA System" dropdowns. Thus, the systems added to this lookup file would not be populated in these dropdowns.
- To modify this, user need to manually add/modify pc_landscape_ovw_source_exclude lookup file ($SPLUNK_HOME$/etc/apps/BNW-app-powerconnect/lookups/pc_landscape_ovw_source_exclude.csv).
  
  For example:
  source // this line is already in pc_landscape_ovw_source_exclude file.
  .
  .
  .
  where,
  - "source" is rule name.

RUNNING LOOKUP SAVED SEARCHES

Look ups can be rebuilt by the following steps:

On Splunk's menu bar, Click on Settings -> Searches, reports, and alerts.
In "App context" dropdown, select "SAP PowerConnect for Splunk (BNW-app-powerconnect)" from the list.
Select the check box of "Show only objects created in this app context".
In the top right search box, enter "- Run Once Only" and click on the search icon.
Above list of look up saved searches should be filtered out.
Now for each saved search from the above list, click on "Actions" -> "Run" one by one in new tabs.
The saved searches will run with "All Time" time range. In case, you want to update the time range with some lesser value stop the existing search job, change the time range and run the search again.

NOTE: Run the saved searches one by one to avoid concurrency issue.

Release Notes

Version 8.1.0

March 30, 2024

Find the release notes for version 8.1.0 here: https://help.powerconnect.io/powerconnectdocumentation/release-notes-for-splunk-app-v8-1-0

Version 8.0.1

Dec. 9, 2023

Please see our release notes at https://help.powerconnect.io/powerconnectdocumentation/release-notes-for-splunk-app-v8-0-0

Version 7.3.0

July 10, 2023

Please see our release notes at https://help.powerconnect.io/powerconnectdocumentation/release-notes-for-splunk-app-v7-3-0

Version 7.2.0

Feb. 24, 2023

Please see our release notes at https://help.powerconnect.io/powerconnectdocumentation/release-notes-for-splunk-app-v7-2-0

Version 7.1.0

Nov. 14, 2022

This release contains new content, updates to existing content, and bug fixes. For more detail, see our documentation here: https://help.powerconnect.io/powerconnectdocumentation/release-notes-for-splunk-app-v7-1-0

Version 7.0.0

July 24, 2022

Version 7.0.0 (July 2022)
New! System Overview (7.x)
New! SAP Fiori: ODATA Metering Trace
New! SAP Fiori: SAP Gateway Statistics
New! Sensitive Authorization
New! File System
New! Audit Integrity Check
New! Spool Content
New! Output Device Status
New! Alert Details
New! User Change Log
New! Event Analytics
New! Smart Business KPI
New! HANA: Backup Overview Dashboard
New! Event type, Dashboard, Menu Mapping
New! PowerConnect Resource Utilization
New! PI/PO Adapter Engine Queues
New! HANA: Large Table Details
New! HANA: Large Table Overview
New! Capacity Management Information System
New! Spool Information
New! HANA: SQL Plan Statistics
New! Authorization Data Overview (SU53)
New! Login Failure
New! HANA: Disk Overview
New! Weekly Usage Statistics
New! SMLG Details
New! STATS Details
New! STATS Overview
New! Fiori Statistics Overview
New! Fiori Statistics Details
Updated! Spool Monitoring
Updated! Alert Definition
Updated! User Password Status
Updated! System Overview
Updated! Authorization Data Details (SU53)

Version 6.9.1

June 24, 2022

Version 6.9.1 (June 2022)
New! Added support for replication of Setup Page in the distributed environment

Version 6.9.0

March 29, 2022

• New! SAP Change Documents
• New! AIF Error Monitoring
• New! PowerConnect Audit
• New! PowerConnect Extractor Schedule
• Updated! PowerConnect Health
• Updated! SAP Landscape Analysis
• Updated! SAP Security Essentials
• Updated! Locks
• Updated! SAP RZ10 Profile Parameters
• Updated! IDOC Status for WE02
• Updated! Monitor for Processed XML Messages (SXMB_MONI)
• Updated! SAP Cloud - CPI Message Monitoring
• Updated! Success Factor Monitoring Dashboard
• Updated! SAP Cloud - API Management Monitoring
• Fixed! Wizard for System Role
• Other minor improvements

Version 6.8.0

Dec. 27, 2021

• New! SAP Landscape Analysis
• New! Wizard for System Role
• New! Business Process Monitoring KPIs
• New! HANA: Active Statements
• New! SAP Fiori: Summary
• New! SAP Fiori: Details
• New! SAP Fiori: Gateway Error Log
• New! Troubleshooting Dashboard
• Updated! Weekly Usage Statistics
• Updated! Landscape Overview
• Updated! Landscape Last Event Received
• Updated! SAP Security Scorecard
• Updated! Users Logged In
• Updated! User Password Status
• Updated! Authorization Data (SU53)
• Updated! Audit Logs
• Updated! Disk
• Updated! SAP OS Memory (ST06)
• Updated! SAP Network
• Updated! CPU All Instances
• Updated! SAP Buffers
• Updated! SAP Instance Memory (ST02)
• Updated! SM51 - Request Queue Information
• Updated! ICM Monitoring dashboard
• Updated! Work Processes
• Updated! SAP Global STAD
• Updated! SAP Global Transactions
• Updated! DIA Steps (Total)
• Updated! SAP RZ10 Profile Parameters
• Updated! Batch jobs
• Updated! Transport Dashboard
• Updated! Java Agent Health
• Updated! Basis Health Checks

Version 6.7.0

Oct. 19, 2021

https://help.powerconnect.io/powerconnectdocumentation/Release-Notes-for-Splunk-App-v6.7.0.3263299585.html

Version 6.6.1

Aug. 30, 2021

Its a minor release on top of v6.6.0

• New! NIPING Utility
• Updated! Landscape Last Event Received
• Updated! Mapping: Event Types (SAP Group Definition) with Dashboards
• Updated! Extractor Status
• Updated! PI/PO Messages
• Updated! SAP Security Scorecard
• Embedded third-party JS libraries in the app package
• Other minor improvements

Version 6.6.0

June 28, 2021

• New! Work Process Detailed Analysis
• New! BPM IDOC To Business Object Relationship
• New! Outbound Delivery Monitor
• New! UME for ABAP
• New! SAP Read Access Login (SRAL)
• New! SAP RZ10 Profile Parameters
• New! ST22 Dump Details
• New! NetWeaver Java: DB Connection Statistics
• New! NetWeaver Java: Distributed Trace
• New! NetWeaver Java: Locks
• New! NetWeaver Java: Process Information
• New! NetWeaver Java: User Sessions
• New! NetWeaver Java: Web Sessions
• Updated! System Overview
• Updated! Landscape Overview
• Updated! Extractor Status
• Updated! Time Machine Dashboard
• Updated! SAP Buffers by Instance
• Updated! CPU vs. Work Processes
• Updated! SM13 Updates
• Updated! Abap Dumps
• Updated! Batch jobs
• Updated! NetWeaver Java: UME
• Updated! SAP CPI Message Monitoring
• Updated! HANA: Configuration Mini-checks
• Updated! ICM Monitoring dashboard

Upgrade steps: https://help.powerconnect.io/powerconnectdocumentation/PowerConnect-Splunk-App-Upgrade.3040673830.html

Version 6.5.0

April 6, 2021

New! ICM Monitoring dashboard
New! SAP Gateway Monitoring
New! SAP ITS Memory Statistics
New! Workflow Event Queue
New! SAP Connect: Send Requests
New! SAP License Information
New! Audit Logs under SAP Security
New! HANA: Diagnostic Files
New! HANA: Custom Scripts
New! Wizard for SAP Security Scorecard
Updated! Extractor Status for ABAP dashboards
Updated! Landscape Overview
Updated! Wizard for New SAP SIDs and Instances Discovery
Updated! SAP Security Essentials
Updated! SAP Security Scorecard
Updated! SAP Logs Search
Updated! CPU vs. Work Processes
Updated! Batch Jobs
Updated! Transport Dashboard
Updated! PI Messages
Updated! NetWeaver Java UME
Updated! HANA: Overview
Updated! HANA: Space
Fixed! System Overview
Fixed! Mapping: Event Types (SAP Group Definition) with Dashboards

UPGRADE STEPS: https://www.powerconnect.io/wiki/splunk-app-upgrade-guide-for-sap-powerconnect-app-6-x/

Version 6.4.0

Dec. 21, 2020

Now supports German and Japanese languages!
New! Authorization Data (SU53)
New! SM51 - Request Queue Information
New! SM51 - RFC Communication Block
New! Transport Dashboard
New! NetWeaver Java Config Changes Monitoring
New! NetWeaver Java Security Audit Logs
New! NetWeaver Java Security Logs
New! NetWeaver Java Certificate Monitoring
New! NetWeaver Java UME
New! NetWeaver Java Component Information
New! NetWeaver Java Disk Monitoring
New! NetWeaver Java Network Monitoring
New! HANA Trace
New! DB/2 Activities
New! Panels for Audit log deletion, User unlocked, New client created, Security Audit Log Parameter ( Security Essentials and Security Scorecard)
Improved! Extractor Status for ABAP dashboards
Improved! Added version update details to each dashboard
Improved! Security Essentials and Scorecard
Improved! SAP Cloud - CPI Message Monitoring
Other Minor Improvements

UPGRADE STEPS: https://www.powerconnect.io/wiki/splunk-app-upgrade-guide-for-sap-powerconnect-app-6-x/

Version 6.3.0

Oct. 9, 2020

• New! Extractor Status for ABAP dashboards
• New! Landscape Component Information
• New! Landscape Last Event Received
• New! Wizard for New SAP SIDs and Instances Discovery
• New! HANA Audits
• New! HANA Memory Usage
• New! HANA Services
• New! HANA Threads
• New! SAP Cloud - CPI Messages
• New! SAP Process Chain Dashboard
• Improved! Mapping: Dashboards with Event Types (SAP Group Definition)
• Improved! SAP Security Scorecard
• Improved! Extractor Status
• Improved! Batch Jobs
• Improved! ABAP Dumps
• Improved! PI Messages
• Improved! Channel Monitoring
• Improved! HANA Alert Details
• Fixed! System Overview : Updated “CPU(%), Memory(%), Availability(%), WP-BTC(%), WP-DIA(%)”panels
• Fixed! SAP Security Essentials: Updated "Users with sensitive roles" title drill-down link and “Password expiration policy” panel
• Other minor improvements

UPGRADE INSTRUCTIONS: https://www.powerconnect.io/wiki/kb-093-splunk-app-upgrade-guide-for-sap-powerconnect-app-6-x/

Version 6.2.0

June 11, 2020

New! SAP User User Behavior Analysis with MLTK
New! Login permissions and change events
New! Risk Assessment Dashboard
Updated! System Overview
Updated! Mapping : Dashboards with SAP Group Definition (with live extractor status)
Updated! ABAP Dumps (now with MLTK)
Updated ! Batch Jobs (with new UI)
New! Weekly Usage Statistics
New! Extractor Status
New! Certificate Status
New! SAP Logs Search
Other minor improvements on Landscape Overview, SAP Security Scorecard, Users Logged in, Audited Logins, User Experience (Geo), Batch Jobs Analysis by Instance, Help menu links and others.

Upgrade instructions: https://www.powerconnect.io/wiki/kb-093-splunk-app-upgrade-guide-for-sap-powerconnect-app-6-x/

HOTFIX : https://www.powerconnect.io/wiki/kb-098-cpu-memory-and-availability-gauges-displaying-0-values-v-6-2-0-bug/

Version 6.1.0

March 13, 2020

Now supports Splunk 8.0 and Python 3.

New! Application Logs (SLG1).
New! SAP Directories (AL11).
New! Workload monitor stats for ST03 - RFC and Web Services
New! Workload monitor stats for ST03 - User Profile
New! Mapping - Event Types :: SAP Group Definition
New! Oracle - Tablespace Growth
Updated! Time Machine Dashboard
Updated! Batch Jobs
Updated! User Experience (Geo)
Updated! ABAP Dumps
Updated! CPU vs. Work Processes
Added! Additional use cases for System Overview, SAP Security Essentials and SAP Security Scorecard dashboards

Upgrade instructions: https://www.powerconnect.io/wiki/kb-093-install-upgrade-guide-for-sap-powerconnect-for-splunk-6-1-0/

Version 6.0.0

Sept. 17, 2019

Biggest splunk app update ever for PowerConnect.
• New! SAP Security Essentials (with out-of-the-box audit reports)
• New! System Overview Dashboard (new landing page, view current status with last 24 hours history at the same time).
• New! Dark Theme and Intuitive Navigation Bar (re-categorized menu options).
• New! Thread Hotspots (SAP Java).
• New! Expensive Statements (Database)
• New! Segments (Database)
• New! MyDashboard – with Drag and Drop function (Beta).
• New! Data Dictionary Dashboard.
• Updated! Number Range Monitoring.
• Updated! IDOC for WE02.
• Fixed! Landscape overview – capacity utilization.

Version 5.0.2

May 29, 2019

• New! Audit and Security Checks dashboard (added under SAP Global.)
• New! Time Machine Dashboard (added under SAP Global).
• New! Background Job Analysis dashboard (added under SAP Instance).
• New! Number Range Monitoring dashboard (added under SAP Global).
• New! SAP CCMS dashboard (added under SAP Global).
• Updated! Batch Jobs dashboard (under SAP Global )
- Added "Jobs Runtime", "Job Steps and Logs for JOBNAME", "Runtime for JOBNAME over last 7 days", "SM50 Logs for INSTANCENAME" and "Job Log Data for JOBLOG"
- Added drilldowns in "Jobs Runtime" and "Active Jobs Runtime"
• Updated! Added timerange and source filters in Channel Monitoring dashboard.
• Updated! Renamed macro jmx to sap-java across all java dashboards for consistency.
• Improved! "Page Hit Rate", "Page Response Time", "Channel Monitoring" dashboards.
• Improved! App improvements made for better cloud vetting score.

Version 5.0.1

Feb. 13, 2019

Changed regex in the SAP_Production_Systems data-model to extract AVAIL_PERCET field from both kinds of data, having spaces after colon(:) and without spaces after colon in the raw events.
• props.conf and tags.conf files added to make the data compatible with CIM Authentication Data-model.
• Channel Monitoring Dashboard added under JAVA > PI.
• App icons updated.
• Resolved issue in Audited Logins dashboard.
• Resolved issue in Memory Pressure panel in SAP Systems dashboard.
• Changed queries for DIA Steps dashboard to utilise time field from raw data.
• Active job runtime panel added in SAP Global > Batch Jobs dashboard. Added scheduled saved search to populate lookup for threshold of batch jobs runtime.
• Active locks duration panel added in SAP Global > Locks dashboard.
• Batch Jobs Runtime Alert - Alert added for Batch Jobs runtime exceeding threshold value for runtime.
• Resolve App Inspect failure.

Version 5.0.0

Aug. 3, 2018

Setup page for Time range and Span filter.
Setup page for all database related dashboard. User can hide particular dashboard, if needed.
Top navigation menu changes

Version 4.20.0

March 30, 2018

Added a panel for Check for "Old" locks inside dashboard Locks and Updates under SAP Global.
Added a dashboard for System Logs under SAP Global.
Added a dashboard for Spool Monitoring under SAP Global.
Added a dashboard for System Settings under SAP Global.
Added a dashboard for SAP Connect under SAP Global.

Version 4.11.2

Oct. 10, 2017

Version 4.11.2 (Oct 2017)
Removed transaction_slabs.csv lookup which was not used in app.
Resolved AppInspect issue of ip_subnets.csv lookup.
Resolved AppInspect issue of conf files having default or global stanza.
Resolved AppInspect issue of Data Model acceleration should be disabled by default. Steps to enable acceleration is mentioned in Data Model Configuration section below.

Version 4.11.1

Sept. 16, 2017

Version 4.11.1 (Sep 2017)
Changed timesUTC flag to false for Availability Gantt chart so that the chart populates according to user's browser's timezone.
Added a new field INSTANCE_NAME for EVENT_TYPE ST03_TIME, SM51, ST06 in Datamodel.
Added a dropdown of Span varying from 1m to 7d and based on this span selection all the panels will change except event status drilldown chart in SAP Production Systems dashboard.
Removed DBMT, FNEMT and TOTAL_RESP_TIME from SAP Production Systems Performance Drill down Response Time chart and showed the chart by Instance Name.
Made JVM dashboard compatible with new event format.
Added a new SAP Global Transactions (Raw) dashboard.
Added a Page Response Time (ms) dashboard.
Added a Page Hit Rate dashboard.
Added Java View, CPU Load, Free Physical Memory (MB) and Free Swap Memory (MB) panels to JVM Dahsboard.

Version 4.11.0

Sept. 4, 2017

Version 4.11.0
Updated SAP_Production_Systems DataModel for "CPU All Instances" Dashboard.
Added "CPU All Intstances" Dashboard in SAP Global.
Added DataModel for SAP_ABAP_SM37 operation.
Added a job picker and a panel for SM37 jobs' average execution time in "Batch Jobs" Dashboard under SAP Global.
Added CPU All Instances Dashboard in SAP Global.
Changed timesUTC flag to false for Availability Gantt chart so that the chart populates according to user's browser's timezone.
Added a new field INSTANCE_NAME for EVENT_TYPE ST03_TIME, SM51, ST06 in Datamodel.
Added a dropdown of Span varying from 1m to 7d and based on this span selection all the panels will change except event status drilldown chart in SAP Production Systems dashboard.
Removed DBMT, FNEMT and TOTAL_RESP_TIME from SAP Production Systems Performance Drill down Response Time chart and showed the chart by Instance Name.
Made JVM dashboard compatible with new event format.
Added a new SAP Global Transactions (Raw) dashboard.

Version 4.10.0

July 18, 2017

Version 4.10.0-1
Javascript enhancements. Check Installation section of this document for more instructions.
Added "Event Status" column and a drill down chart in "SAP Production System" dashboard.
Added a new "CPU vs. Work Processes" dashboard.
Modified regex for Availability in datamodel for "SAP Production System" to support all Splunk versions above 6.2.x.
Modified "SAP RZ10", "SAP Global Transactions" and "SAP Instance Transactions" dashboards to support Splunk 6.2.x.
Panel title changes in "Disk" and "HANA" dashboards.
Bug fix in "DIA Steps (Total)" and "DIA Steps" dashboards which showed negative values in charts.
Bug fix in "DB/2" dashboard by modified search queries.

Version 4.0.9

March 28, 2017

Version 4.0.9-1
Added HANA DB Reports:
1. Overview
2. Alert Details
3. SQLPL Details
  Added ASE Dashboards:
4. Log Details
5. Database Details
6. Computation Usage Details
7. DeviceIO Details
8. Resource Details
9. SpinLock/System State Details
10. System Action Details
  Added IDOC Status for WE02 Dashboard in SAP Global
  Added Multiple Sourcetype in Macro: sap_abap, sap:abap, sap:abap:<event_type>
  Changed jmx macro to support both the sourcetype : jmx, sap:java

Version 4.0.8

Feb. 23, 2017

Version 4.0.8-2
Modified the lookup query that is used to populate SAP system instance dropdown.
Added new saved searches to run once manually after installing app to populate lookups from all event data. Added a step in Configuration section below.
Fixed Availability REGEXP inside Datamodel
Added a new Dashboard of "SAP Production Systems" as a default dashboard.
Added a new Dashboard of "SAP CRM BSP Transactions".
Added a new Dashboard of "SAP RZ10".
Resolved issue of Blank TCODEs for Task Type Dialog
Add Drill Downs in all charts of "SAP Global STAD" and "STAD by Instance" dashboards.
Moved "Errors in PowerConnect Application Log" panel below "PowerConnect Messages received" in PowerConnect Health dashboard
Removed timezone and timestamp field configuration from props.conf.
Move field extractions from props.conf to search queries.
Updated app to use _time field instead of TIMESTAMP field.
Resolved issue with Task Dropdown default.

Version 4.0.5

May 11, 2016

All SAP System and SAP Instance form input dropdown will use Saved Search
Added a pre-configured role "pc-admin"
Added a new dashboard "IDOC Status" under SAP Global Navigation Menu
Added description in app.conf
Removed usage of deprecated <seed> option in Simple XML forms.
Cleanup of savedsearches.conf and minor fixes

Version 4.0.4

May 8, 2016

3,550

Downloads

Share Subscribe

Version

Built by

Software ONE

Support

Developer Supported

Contact Developer Questions on Splunk Answers Flag as inappropriate

App Contents: Visualizations

Compatibility

This version of the app (8.0.1) is not available for Splunk Cloud. However, version 8.1.0 of this app is available for Splunk Cloud.

This version of the app (6.5.0) is not available for Splunk Cloud. However, version 8.1.0 of this app is available for Splunk Cloud.

This version of the app (6.4.0) is not available for Splunk Cloud. However, version 8.1.0 of this app is available for Splunk Cloud.

This version of the app (6.3.0) is not available for Splunk Cloud. However, version 8.1.0 of this app is available for Splunk Cloud.

This version of the app (6.2.0) is not available for Splunk Cloud. However, version 8.1.0 of this app is available for Splunk Cloud.

This version of the app (6.1.0) is not available for Splunk Cloud. However, version 8.1.0 of this app is available for Splunk Cloud.

This version of the app (6.0.0) is not available for Splunk Cloud. However, version 8.1.0 of this app is available for Splunk Cloud.

This version of the app (5.0.2) is not available for Splunk Cloud. However, version 8.1.0 of this app is available for Splunk Cloud.

This version of the app (5.0.1) is not available for Splunk Cloud. However, version 8.1.0 of this app is available for Splunk Cloud.

This version of the app (5.0.0) is not available for Splunk Cloud. However, version 8.1.0 of this app is available for Splunk Cloud.

This version of the app (4.20.0) is not available for Splunk Cloud. However, version 8.1.0 of this app is available for Splunk Cloud.

This version of the app (4.11.2) is not available for Splunk Cloud. However, version 8.1.0 of this app is available for Splunk Cloud.

This version of the app (4.11.1) is not available for Splunk Cloud. However, version 8.1.0 of this app is available for Splunk Cloud.

This version of the app (4.11.0) is not available for Splunk Cloud. However, version 8.1.0 of this app is available for Splunk Cloud.

This version of the app (4.10.0) is not available for Splunk Cloud. However, version 8.1.0 of this app is available for Splunk Cloud.

This version of the app (4.0.9) is not available for Splunk Cloud. However, version 8.1.0 of this app is available for Splunk Cloud.

This version of the app (4.0.8) is not available for Splunk Cloud. However, version 8.1.0 of this app is available for Splunk Cloud.

This version of the app (4.0.5) is not available for Splunk Cloud. However, version 8.1.0 of this app is available for Splunk Cloud.

This version of the app (4.0.4) is not available for Splunk Cloud. However, version 8.1.0 of this app is available for Splunk Cloud.

Products: Splunk Enterprise, Splunk Cloud

Products: Splunk Enterprise

Products: Splunk Enterprise, Splunk Cloud

Products: Splunk Enterprise

Splunk Versions: 9.2, 9.1, 9.0