Microsoft Sentinel for SAP

Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · Logic Apps · 📊

↑ Back to Connectors Index

---

Attribute	Value
Connector ID	MicrosoftSentinelSAP
Publisher	Microsoft
Used in Solutions	SAP
Collection Method	REST Pull API
Ingestion API	HTTP Data Collector API
Custom Log V1 Tables	Yes 🔶 — ingests into tables with type-suffixed columns

The Microsoft Sentinel solution for SAP allows you to monitor SAP systems and detect sophisticated threats throughout the business logic and application layers. The solution includes the Microsoft Sentinel for SAP data connector which collects logs from across the entire SAP system landscape using a containerized agent.

Additional Information

• 📖 Deployment Guide: SAP solution deployment overview - Step-by-step guide for deploying the agentless or containerized data connector
• 📖 Log Reference: SAP log and table reference - Logs collected by the data connector including ABAPAuditLog and ABAPChangeDocsLog
• 📖 Security Content: SAP security content reference - Built-in analytics rules and watchlists for SAP threat detection

Tables Ingested

This connector ingests data into the following tables:

Table	Transformations	Ingestion API	Lake-Only
ABAPAuditLog_CL 🔶	?	✓	?
ABAPAuthorizationDetails_CL 🔶	?	✓	?
ABAPChangeDocsLog_CL 🔶	?	✓	?
ABAPUserDetails_CL 🔶	?	✓	?

💡 Tip: Tables with Ingestion API support allow data ingestion via the Azure Monitor Data Collector API, which also enables custom transformations during ingestion.

---

Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · Logic Apps · 📊

↑ Back to Connectors Index