SAP LogServ (RISE), S/4HANA Cloud private edition
Solution: SAP LogServ
Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · 📊
| Attribute | Value |
|---|---|
| Publisher | SAP |
| Support Tier | Partner |
| Support Link | https://community.sap.com/t5/enterprise-resource-planning-blogs-by-sap/announcing-limited-preview-of-sap-logserv-integration-with-microsoft/ba-p/13942180 |
| Categories | domains |
| Version | 3.0.3 |
| Author | SAP |
| First Published | 2025-02-17 |
| Last Updated | 2025-07-18 |
| Solution Folder | SAP LogServ |
| Marketplace | Azure Marketplace · Popularity: 🟢 High (80%) |
SAP LogServ provides the SAP RISE logs to Microsoft Sentinel, allowing SOC teams to ingest, monitor, and hunt across SAP data. This integration enhances security by enabling faster detection, investigation, and mitigation of risks within SAP RISE environments.
Contents
Data Connectors
This solution has 1 discovered data connector(s)⚠️ (not in Solution definition):
🔍 Discovered: This item was discovered by scanning the solution folder but is not listed in the Solution JSON file.
Tables Used
This solution uses 1 table(s):
| Table | Used By Connectors | Used By Content |
|---|---|---|
SAPLogServ_CL |
SAP LogServ (RISE), S/4HANA Cloud private edition | Analytics, Workbooks |
Content Items
This solution includes 5 content item(s):
| Content Type | Count |
|---|---|
| Analytic Rules | 4 |
| Workbooks | 1 |
Analytic Rules
| Name | Severity | Tactics | Tables Used |
|---|---|---|---|
| SAP LogServ - HANA DB - Assign Admin Authorizations | High | PrivilegeEscalation | SAPLogServ_CL |
| SAP LogServ - HANA DB - Audit Trail Policy Changes | High | Persistence, LateralMovement, DefenseEvasion | SAPLogServ_CL |
| SAP LogServ - HANA DB - Deactivation of Audit Trail | High | Persistence, LateralMovement, DefenseEvasion | SAPLogServ_CL |
| SAP LogServ - HANA DB - User Admin actions | High | PrivilegeEscalation | SAPLogServ_CL |
Workbooks
| Name | Tables Used |
|---|---|
| SAPLogServObserve | SAPLogServ_CL |
Release Notes
| Version | Date Modified (DD-MM-YYYY) | Change History |
|---|---|---|
| 3.0.5 | 01-04-2026 | preview tag remove, UI update |
| 3.0.4 | 11-08-2025 | Connector UI updates |
| 3.0.3 | 17-07-2025 | Observability Workbook added |
| 3.0.2 | 25-06-2025 | Analytic Rules for HANA DB added |
| 3.0.1 | 09-04-2025 | Retention setting dropped from table to default to LogAnalytics ws default |
| 3.0.0 | 17-02-2025 | Initial Solution Release |
Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · 📊