Since nobody answered yet, I'll try to give you a possibility - although I don't know SAP at all!
First you need to know, what's all (warnings/errors, transactions, logins, etc. etc.) being logged by SAP and where (how many logfiles, locations, etc.) is it being stored in
Think of something exciting you want to monitor or report
eg. failed user logins on your SAP boxes
eg. successful transaction by user per hour
eg. billing reports
eg. net profits or losses
etc. etc.
The variety on reports is so vast, but all it depends on your logfiles. When you figured out what all is in your logfiles and what kind of things you wanna see, than you may be able to ask more specific on how to do reports etc.
Splunk itself can pretty much do ANYTHING with your logfiles what you want/need - but you need to know what you want!
btw: to correct myself - with logfiles, I mean any readable fils, and not only logfiles
... View more