There are two extractors for STAD Metrics in “Administrator” -> “Setup Group Def”
STAD3 – Collects aggregated data for selected program, user, task type or tcode
STAD_RAW – Filter contains the list of fields, which will be extracted and sent as is without any aggregation.
There are two metric filters for the STAD metrics collection
The Aggregated filter is used to exclude STAD records from collection
You can specify a Program, user, Task Type, Transaction Code or a combination of all four.
An example of the configuration and output a shown below.
The output in Splunk shows the STAD details for the above job stop being collected
The RAW filter is used to collect the raw STAD metrics with no aggregation. The fields selected will sent to Splunk.
Example setup and Splunk output: