SAP BTP
Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · Logic Apps · 📊
| Attribute | Value |
|---|---|
| Connector ID | SAPBTPAuditEvents |
| Publisher | Microsoft |
| Used in Solutions | SAP BTP |
| Collection Method | CCF |
| Connector Definition Files | SAPBTP_DataConnectorDefinition.json |
| DCR Definition Files | SAPBTP_DCR.json |
| CCF Configuration | SAPBTP_PollingConfig.json |
| CCF Capabilities | OAuth2, Paging |
| Microsoft Learn | View on Learn |
SAP Business Technology Platform (SAP BTP) brings together data management, analytics, artificial intelligence, application development, automation, and integration in one, unified environment.
Tables Ingested
This connector ingests data into the following tables:
| Table | Transformations | Ingestion API | Lake-Only |
|---|---|---|---|
SAPBTPAuditLog_CL |
✓ | ✓ | ✓ |
💡 Tip: Tables with Ingestion API support allow data ingestion via the Azure Monitor Data Collector API, which also enables custom transformations during ingestion.
Permissions
Resource Provider Permissions:
- Workspace (Workspace): Read and Write permissions are required.
- Keys (Workspace): Read permissions to shared keys for the workspace are required. See the documentation to learn more about workspace keys
Custom Permissions:
- Client Id and Client Secret for Audit Retrieval API: Enable API access in BTP.
Setup Instructions
⚠️ Note: These instructions were automatically generated from the connector's user interface definition file using AI and may not be fully accurate. Please verify all configuration steps in the Microsoft Sentinel portal.
Step 1 - Configuration steps for the SAP BTP Audit Retrieval API
Follow the steps provided by SAP see Audit Log Retrieval API for Global Accounts in the Cloud Foundry Environment. Take a note of the url (Audit Retrieval API URL), uaa.url (User Account and Authentication Server url) and the associated uaa.clientid.
NOTE: You can mass onboard BTP subaccounts by using provided tools.
2. Connect events from SAP BTP to Microsoft Sentinel
Connect using OAuth client credentials BTP connection
When you click the "Add account" button in the portal, a configuration form will open. You'll need to provide:
Account Details
Subaccount name (e.g. Contoso). This will be projected to the InstanceName column. (optional): no space or special character allowed!
Subaccount ID (GUID) (optional): SubaccountId property from the BTP service key JSON
SAP BTP Client ID (optional): Client ID
SAP BTP Client Secret (optional): Client Secret
Authorization server URL (UAA server) (optional): https://your-tenant.authentication.region.hana.ondemand.com
Audit Retrieval API URL (optional): https://auditlog-management.cfapps.region.hana.ondemand.com Advanced
Polling Frequency (minutes, 1-15) (optional): 1
Log Ingest Delay (minutes, 1-120) (optional): 20
💡 Portal-Only Feature: This configuration form is only available in the Microsoft Sentinel portal.
3. Subaccounts
Each row represents a connected subaccount Connector Management Interface
This section is an interactive interface in the Microsoft Sentinel portal that allows you to manage your data collectors.
📊 View Existing Collectors: A management table displays all currently configured data collectors with the following information:
- Subaccount Name
- Subaccount ID
- Polling Frequency (minutes)
➕ Add New Collector: Click the "Add new collector" button to configure a new data collector (see configuration form below).
🔧 Manage Collectors: Use the actions menu to delete or modify existing collectors.
💡 Portal-Only Feature: This configuration interface is only available when viewing the connector in the Microsoft Sentinel portal. You cannot configure data collectors through this static documentation.
Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · Logic Apps · 📊