Pushing SAP Security and Audit logs to SIEM tool directly

[Former Member]

Hi All,

We have an urgent requirement to populate SAP Security and Audit logs in our SAP Landscape and integrate/push this logs to existing SIEM tool. We do not want to use any bridge or connecting tool between SAP and SIEM.

Can someone help ?

Regards,

KK

[Former Member]

Hello Ketul, how are you?

Just in case it helps in your analysis, many companies integrate Splunk, QRadar, ArcSight and others through our platform.

Here are a few links that may be useful:

• QRadar
• Splunk

You do require the Onapsis Security Platform to use them, if you think this may help you do not hesitate in contacting me and we can do a call discuss it better.

Regards

[Former Member]

Hi Sergio,

I am good. Thanks for your valuable feedback. The requirement is not to use other platform. They have existing SIEM tool for Network threats and infrastructure. They want to use the same tool for SAP Landscape. The question here is how we can integrate with SIEM tool.

Regards,

Ketul

[Frank_Buchholz]

Hello Ketul,

maybe this splunk>answer from July 2019 may help:

How to Splunk the SAP Security Audit Log
https://answers.splunk.com/answers/757714/how-to-splunk-the-sap-security-audit-log.html

Kind regards
Frank Buchholz