Hi marinaof, PowerConnect for SAP (https://splunkbase.splunk.com/app/3153/) can most likely be utilized for what you're wanting. However, you'd have to purchase a license for the add-on that sits on the SAP server. Depending on where you're located you can either purchase a license and support through RHONDOS or BNW directly. RHONDOS - Rhondos.com BNW - http://www.powerconnect.io/contact-us/ Again, PowerConnect is an SAP-certified app that sits in the SAP ABAP layer and pushes data out to Splunk. ... View more