ABAPTableDataLog

ABAPTableDataLog Schema #

Table description #

TableSection TableType TableSectionName Description
Usx Regular Microsoft Sentinel SAP NetWeaver Application Server ABAP logs changes to tables. This log stores information about the changes made to selected tables, including the user who made the change, the date and time of the change, and the type of change that was made.

Table retention #

HotDays ColdDays TotalInteractiveDays
14 16 30

Schema #

Name Description Type
_BilledSize Double
_IsBillable String
AgentId Unique agent or integration suite identifier. String
ClientId The ClientId is a three-digit number that identifies a specific client within an SAP system. The ClientId is used in various SAP transactions and configuration settings to identify the client and ensure that the correct client is being accessed or configured. String
DBLogId The unique identifier of the database log. String
Host The hostname of the SAP system. String
Instance The Instance refers to a specific installation of an SAP system on a server. An SAP system can have multiple instances running on the same server, each with its own set of processes and resources. The Instance is identified by a unique name that is set during the installation of the SAP system, following syntax: . String
Language The language of the event. String
LogKey The unique identifier of the log key. String
NewValue The new value of the field. String
OldValue The old value of the field. String
OperationTypeSQL The type of operation that was performed, such as insert, update and delete. String
Program The program that was executed. String
SourceSystem String
SystemId The SystemId is a unique identifier for a specific SAP system. It is a three-character alphanumeric code that is used to distinguish between different SAP systems. String
SystemNumber The SystemNumber is a two-digit number that identifies a specific SAP system. It is set during the installation of an SAP system and cannot be changed afterwards. The SystemNumber is used in various SAP transactions and configuration settings to identify the system and ensure that the correct system is being accessed or configured. String
SystemRole The SAP system’s role. String
SystemUniqueId Unique system identifier. String
TableField The field of the table that produced the change. String
TableName The name of the table that produced the change. String
TenantId Unique identifier of the tenant into which the data connector ingests data. String
TimeGenerated Date and time when the record was generated. DateTime
TransactionCode The transaction code of the event. String
Type The name of the table String
UpdatedOn The date and time of the event occured in the SAP system in UTC format. DateTime
User The User who performed the a specific event or activity. String
VersionNumber The version number of the event. String

Schema changes #

Date Action
2026-01-02 Table added to tracking