KB 078 – SM51_STATE extractor
The extractor sends the list of instances available in SM51 with their state. The list is buffered based on the THRESHOLD parameter in the metric config (by default 86400 seconds).
If the server is not in the SM51 list anymore, however the record still stored in the buffer, it will be sent to Splunk with the State = ‘03’ (Shutdown).