From 956b0141f3c4cdab6bbcbeca3f821771b904d2d6 Mon Sep 17 00:00:00 2001 From: MartinPankraz Date: Thu, 30 Oct 2025 14:49:03 +0100 Subject: [PATCH] dcr fix --- .../SAPS4Public_DCR.json | 2 +- .../SAPS4Public_connectorDefinition.json | 2 +- .../Data/Solution_SAPS4Public.json | 2 +- .../Package/3.0.2.zip | Bin 0 -> 7589 bytes .../Package/mainTemplate.json | 10 +++++----- .../SAP S4 Cloud Public Edition/ReleaseNotes.md | 1 + 6 files changed, 9 insertions(+), 8 deletions(-) create mode 100644 Solutions/SAP S4 Cloud Public Edition/Package/3.0.2.zip diff --git a/Solutions/SAP S4 Cloud Public Edition/Data Connectors/SAPS4PublicPollerConnector/SAPS4Public_DCR.json b/Solutions/SAP S4 Cloud Public Edition/Data Connectors/SAPS4PublicPollerConnector/SAPS4Public_DCR.json index a2ecc0b3cdd..138f02545c0 100644 --- a/Solutions/SAP S4 Cloud Public Edition/Data Connectors/SAPS4PublicPollerConnector/SAPS4Public_DCR.json +++ b/Solutions/SAP S4 Cloud Public Edition/Data Connectors/SAPS4PublicPollerConnector/SAPS4Public_DCR.json @@ -99,7 +99,7 @@ "destinations": [ "clv2ws1" ], - "transformKql": "source\n| extend TimeGenerated = now(), AgentId = \"S4-Public-Cloud\", ClientID = slgmand, Computer = terminal_name, Email = email_adress, MessageClass = eventID, MessageText = rsau_text, SystemID = sid, UpdatedOn = todatetime(log_tstmp), TransactionCode = slgtc, User = UserID, Variable1 = param_a, Variable2 = param_b, Variable3 = param_c, Variable4 = param_d\n| project TimeGenerated, AgentId, ClientID, Computer, Email, MessageClass, MessageText, SystemID, UpdatedOn, TransactionCode, User, Variable1, Variable2, Variable3, Variable4", + "transformKql": "source\n| extend TimeGenerated = now(), AgentId = \"S4-Public-Cloud\", ClientId = slgmand, Computer = terminal_name, Email = email_adress, MessageClass = eventID, MessageText = rsau_text, SystemId = sid, UpdatedOn = todatetime(log_tstmp), TransactionCode = slgtc, User = UserID, Variable1 = param_a, Variable2 = param_b, Variable3 = param_c, Variable4 = param_d, AbapProgramName = slgrepna\n| project TimeGenerated, AgentId, ClientId, Computer, Email, MessageClass, MessageText, SystemId, UpdatedOn, TransactionCode, User, Variable1, Variable2, Variable3, Variable4, AbapProgramName", "outputStream": "Microsoft-ABAPAuditLog" } ] diff --git a/Solutions/SAP S4 Cloud Public Edition/Data Connectors/SAPS4PublicPollerConnector/SAPS4Public_connectorDefinition.json b/Solutions/SAP S4 Cloud Public Edition/Data Connectors/SAPS4PublicPollerConnector/SAPS4Public_connectorDefinition.json index 1a8ff33f3c7..83480d3083f 100644 --- a/Solutions/SAP S4 Cloud Public Edition/Data Connectors/SAPS4PublicPollerConnector/SAPS4Public_connectorDefinition.json +++ b/Solutions/SAP S4 Cloud Public Edition/Data Connectors/SAPS4PublicPollerConnector/SAPS4Public_connectorDefinition.json @@ -10,7 +10,7 @@ "title": "SAP S/4HANA Cloud Public Edition", "logo": "SapLogo.svg", "publisher": "SAP", - "descriptionMarkdown": "The SAP S/4HANA Cloud Public Edition data connector enables ingestion of SAP's security audit log into the Microsoft Sentinel Solution for SAP, supporting cross-correlation, alerting, and threat hunting. Looking for alternative authentication mechanisms? See [here](https://github.com/Azure-Samples/Sentinel-For-SAP-Community/tree/main/integration-artifacts).", + "descriptionMarkdown": "The SAP S/4HANA Cloud Public Edition (GROW with SAP) data connector enables ingestion of SAP's security audit log into the Microsoft Sentinel Solution for SAP, supporting cross-correlation, alerting, and threat hunting. Looking for alternative authentication mechanisms? See [here](https://github.com/Azure-Samples/Sentinel-For-SAP-Community/tree/main/integration-artifacts).", "graphQueriesTableName": "ABAPAuditLog", "graphQueries": [ { diff --git a/Solutions/SAP S4 Cloud Public Edition/Data/Solution_SAPS4Public.json b/Solutions/SAP S4 Cloud Public Edition/Data/Solution_SAPS4Public.json index a786fc06c0c..41a27f2761a 100644 --- a/Solutions/SAP S4 Cloud Public Edition/Data/Solution_SAPS4Public.json +++ b/Solutions/SAP S4 Cloud Public Edition/Data/Solution_SAPS4Public.json @@ -17,7 +17,7 @@ "Watchlists": [], "WatchlistDescription": [], "BasePath": "C:\\GitHub\\Azure-Sentinel\\Solutions\\SAP S4 Cloud Public Edition", - "Version": "3.0.1", + "Version": "3.0.2", "Metadata": "SolutionMetadata.json", "TemplateSpec": true, "Is1PConnector": false diff --git a/Solutions/SAP S4 Cloud Public Edition/Package/3.0.2.zip b/Solutions/SAP S4 Cloud Public Edition/Package/3.0.2.zip new file mode 100644 index 0000000000000000000000000000000000000000..e6bb6806aee1aa2b8bfacbfd9eb3f4f34f22682a GIT binary patch literal 7589 zcmZ{JWmFUZw=LZv-OUU+G=fM-cMT!k-HpHi(hUkjcMC|zPy-Al-CY9$B3*)@g4g@~ zdGFn~?m1_jv(EXk|L%46)=@{tAV)z#!9hU{urR%6P=%IZp`ZwoqM%UyyW0BLTl?7? zI4jsYID0tzIeU8Wx%hf|v>R=D>?@ImGFd&B4s1s#%2(L2C7Dyd#wDLUKzm0zbOSU} z33K`gXjz%|sOoVx&ZQoM9W34el3XklOj?BKtSkvWnww|q8B`}eKm4M2bM-d=z$ktf zEpn@C!9oLgm*4q9&CaOAr}?2vh?=9@Y39t1ws_=7*ZC^KOSnsflm7X1Gq4k=nA(;o zqrWgutoVniZrL)j8J3BksV3rfiVjdRg$G1Do8v z4Ci6WMmCoa|3ppZKaCoPR{5{bce3PC~j-{hX&S;AVuKQ-iFcdZnkH>%A zoI>YLy`sK4$O3gLU_Okn`aC9g`jvVjlrt$5!}i`qx+nJWpw-g>IXw`EZYTSGP?^g9 z(;N;l3wKC&@7zKP;hG&#r~Pw!=ZIj^;WG1v)YB9Ivw89H#6 zM=E!CKpCy}NJFMf%n946*`&8dHq+WW31EG!`e@j+GV0jlD&};%iu%>w2pL-ut)QNe zfL~2nOMUTyn7d5zCamMDF9|clZSiN5+hwc{@^^s`}R2t%uRj1fXi|=QQP@wC) zO))y2U>Li#IC}Tq1S0oT`m=giL*i3_3~H5Lf!yX zDDL;PxXa0^$+I{QMt_?2&^mr|@*7k8T+?&A@@Y6oF){$$vBDu&<}H>vY`cNQZD@jI zBI{eA0a*Be?nbdf5k1>OdQ3t!rxKe{b#FMpd&9TrMb*%%??+2wP#;{F+GvyP*c@t? zIhlH4gpQmC1AtP36Km(r{40${mLcip`eWp&yIlXvZtkCds3a?PWYYaB-if@{yQ65A z$!Dtny6tzNRxVSO$+=d?EFUQPyBWXoGIKM_!Y(_j;q!hjmjl4uI=)U7tOaS3u@N1l&0Y8HGZbt0>6uU8}8@CZ(NUsQ)_Wqe5mELh`}dQ`~7W6I9iA)=7IE%;LZzF!;4+$oZS?}FJ z2aV`O4g7Arjcxk~__7e=)J9WC+M#hFYJT*~@x8_B3;}w>0KH8+f$gJsX`9z-C-|Z< z0jn)>{zlI%K>~HaZG9;-%~_?(H%MA$*Em@+{3S692(aS_=s>)9FBxHJ#Xo!&Jj z*u(ces6-dCrz~{wGSj3!)x8Z935uJRn}Ws-c*q{Tg^4qoD%d{28kk8Y(#mDbOyQW| zrsd36ZEXRBR6}m(bG<*tg&o9Jp$5H+S48#0YChRM!o=l9?jcNIW5pUB+;E&XaL+So z=sVkF?8O#kui4WddcJh3;Gd3vFSlAg%40vNAve+JIA|z|ji-r2Lef^jG$((tS(X!| z`m)6)*jDJ<^NM-GB(Ux;_AUUFbD2DKEUgy~noFCVkt2D@{^c^NO>&hQN#R*`Umo-T z74DwzvfQQvFNAD~*4Bhw=!V{F{_e4Ba$-_K|G2$nn~T1(A$TDe8vJx}d{_4uP3Qli zH3Hm)WK2pFl!6Qt6q0|m=5Fomp>OZ*<@S%<{zGWz<{`eD9W8(Rg`bG13j^#ze%!EW z?vwpyT-G8(N+h^+olmt3^C>j2FR>4xl`x1-Pd)MeEZ^4laYV$aBvz;xtA%Qp&r|>t zzFgQe8}Z&Nhdtcj%h6hLx#ID;)2EN>yJ|B8^dJgT)n669$2SZ7&eRv33fQ{JJ-N6G zC~gnIKHu?J#hN7%<_*McIMN|3L_&A}I<;wFXYJBJ<5w*ZuB8Iloe$ zb0zv}0s*qPmL^wVJmluag#x@+y`!D^eG|xD^;?XH=njr11T!Eh8KNovp77;-YeTsF;&^2$x0;6N=Ct?<~el z4|VZ3NOJqre{;1~MRVCi*#%lN* zOI@62r9+MPFX^4KxPKI`Hy^NKwnlhy3VaZTM>^)}pjtX?l)>UPEiNwJi`RBZ(UK0{ z7h8&1R`Rx%U@pC@mRrKhwGu{!)!kP8(QUaiSo8U`U^?NOv!mA0(Y|dRkR;Nhqy{u8f=NUMyi8S7QYK;t?P!XS4Whb3b7u`Zz=K7Xfx(6FP6hqlsh4Itm*2!{F<>=J zyln0iq&ul<9m@!)&&It*c9J|us0nMN#f zhY;K5-3x*@NYomGu(Wxfr2V%``gYj(InJV+9m^gakeRTbEOS5Vqf1<0>}+WzR`s%y znH~D(aq8qAcebYpxdy8W(?A0U0bem;Qivv{#2g2)R~ZIk@O1WKmY8j5!c>+;(@<3+ z#|T5KY^{eIgG961(PECfxMjaG(IIRU*`2=oYALe*+oyF_gv@vi)$H=zCY_4)?<^t? zD^6TZPZq%Cfry9H@g9n(spg@`G!r{@wY7kjHC@cI=JFVbfR+=aep3`nMy>qHY)$?* z&2PLEc^`_a-cFrfzIIS^yn)StoVTJH!>ObMf>C`f1HQ8pw(AL#!VM(2AXD_l{9N%D z7n3IPP`%1gFx2_ul90&s`PXjW)*NF@G9v4J?(DB?jv7vR#vD?+9l?`Fw$>Mxh!8^h zki5;m^%duh64HQ<@`T3&T&wSlIh8)`qfs#)Ow z9!)!r<09s{<^2+@&<|Bud6oOtVp!PhXtN9+aB18CO01I{;H(-eB&+rbHeQY&CfthU zhJ57#ncZV2@>UzoPifQ|y}8srQ@9e$KgedQK%9Z8_<5A73O8?&E~ z?vv?MMN-=$fF53Gm>f&6TwrR>i_vz0i1-4KEv{n*BB3i!#Tu`12z(=;5hE4bj7IgD>rkWXL}u*8 zd$YaR^KC=B4WNeh)5m7J&{kqv@T%_{f4169B>p<%J@z@-UbnPk@X9i2Nz%)<$%~ZQC0aYknM+vP*v|LJkV&{P&sMuv)`_Pl$?ij{ zWg@jihRLa@9ae<(96|_53EdfcY=Z+>bFs$1a}TCauD{i4utm|veNyA$QGX|zs7y{+o2+7V z#2AE+4Xw_`ew@pH<1s`>oizqOg5iV_*Zynh`>hszB(lzkX_kr`IY zyQ?oG8xYVC`-GSt-&_@gS8E5~21#LlIpsXbrAf)?O*)K?9n8DG^8^0fC`A^kX=NCBv$E~58W!fQ4jtE2_{CBd+?7cNpk>olu=BYZs zvDVx%#4+xLonvDwWFjViRdv`VhZ^BwKFgjGu>^k|C=B2GA(iU zWlUSM9&|$EA!xtSK`km|npk2jGmb8B{K`s9h1)7ThiGYrh{*iY%&lhS`o|qXwVg5< zMe?!N4iR#UX@LPdy>N(kXRAD4wFcn6es2f-@$!?6p@Zo|4lGU4!saxB4D>@jq4C3| zWDQjO$$Oa11+XQV7xj2(0<0ZISL@bZD+KqLx#W^Hbm79_tLPKz*>#a^(80l#UgNDi zkbz(eRHcJ_$5OkxV#~xR{{~HFjmkNN&9f=%ib(0x z8`1-E5qqr~-*jbtKqNOQ#S2Ozk?s#{*L`?W?G!xPJYjg#Udu$y>XN(#cpQFpmR^K0 zl$(u62s`f5740%>IM+q9$+TP`zrm-wOM#^*uaDbvI?ApOc=B+$Wv9;l+Tys^!dppf zs+H&}@6=By zrGsI7j*S;`7L=1S7a}#H0Pq$WZV`qCxt>FyT^?G`)*Zg&U+wQ3l?)Bp>FcLIuFOt? za{h@PjiaQgmos`#lt8KIT-nUtf|6!&RG%=34a6sW&h1jhB%c&o;zHa>dReN@@TyYD zRMKo|QQ6U;?m@QP*shO{Bl-A;LSik8LAH;Wx&fvxq;|KphEt4Y=|N3B%~Mh0!htaa zC}|Txi8Gc(iTY6a>kp_CG{w^gK#-jyIgok;aLJgpN!CG1pksZa#9i0P+0FwyJm{UQ zqdxGVG)NhK5hLj1X1F6H{be4)S&4(rN?}SMZ=RXQtLB9JXBagzPyWKHENhEL z*%`eSPW0^RF4}G@|GvA{C5Ygz+U^& z=1!zf5Jg8L;1Dl^BK%>S-U~CzZ~8Agkk!$#WiSng>Zj=@XyMD!sBo|MHZ@}#y2EDd z=BW~oMvd^SJX5!#R`luPyOkgXu(VlH?*NTfs)|n)Y|K?BQEPV?K@~ucX$*3#z7CcA z#iq>Ou?-RuIiiuReqf9!mfT`o^L%yBSyn%2*gLf5@loAQM#V;w>7b}^9RmIn zJ1)uf_{FDK{T<(`PO3Aaa#)l~S56#X4kt(Zs$f?HVHsJ6X_5FXQ2t@#_HJ&fT%WqM z5N$)h4RVUJ836k8lOAC0c={=|Szc zUmCK9G}Tde53d$nnidT9DkiNf)OX8^t;^H6F2&F#O)&YoF@W9Fa7$cD6Lg|(S^^Px zMb#@aw4Y{n*RoeLaR`aY2hIpjN~V^j_pZ->-#cfiexjxK)ipBM%eD{A9^zHs%glvo zKnJ;a5S+e?v@00-TQAIf06BJwoW=||>ptQKVCn;*hyAa(F0Oj$oftb0G%KAF1>R)c zFpQ4Qv+q)Lnp{zUZ_aCZ*70>i#I2A_>dC|1kCmst9mV(lQ`Uk7UO`H;v{q5!BxX%= zd_jFR4Fvd~p}c*R)K;JeOM^A!#%@@f*-H7McVVca)Uq_8NlB10{2bu}~ zVNxYl(odSwY#(0Ir6kOrjqOe2=Q#99`j6~ASI(Z*nYrV2Z&l5BvwmUhk`i4oWlFlMQ-+r_t84nlbET71IVh&7 z{Q1o3EtS$FVlaw*Y|gL{S_Y^k5NoZR&)}Ez{p(PZ$De zpYZy8hY7OhPd4hHny9;ZBm})WgM`UX0+C*sjvR~6?lJCezAV*Y%=B^Bst#peib9q> zoz7t)A;sV5Oz1+r$1yp#e^TQCw2fUL60Qh%<9+65am4x(CmQ!RLtfwL?04O7xk^Vs zqOjMG{)xO_z#N?}%DJ_QPnadMDg$?Wg^vzX9mt!$mGl%y@@t9&VHH|oc=V1tQ5IW-rU}L`mDliar=RXUF75@FUGPAMxjyqW1M4Y{N${t*n{#(ZtTi;HgcFj6sJbiGOdn)C=$ zH50aoD#BxH&(`t6Tl-LQcs5+Y#*qG0wmgBkcPcE6q3%WJf0=KA8xc?VV4;#ti#y}c zYW(}|w8P!9FWCQkcbwYOTbht4Zslsr6q;{`*1rYCvo%B>y>9o-6y!B4m29N*{Dy;M zu@^8cy*9}wl|NGAP=7MlvPHHG2(y+H9Yr7enrYN%h zD;U84w`joT5yj5?8Tbh}EG~ieNGF@b6t+N7`0;bVT>H(s?jG)>xk+S5SM^?(aP_Y@ z2Zg=#yfS_X*IhIPY7R^}8venR<{4N&w_b-ew2?!6{wO(#Lv{!o#|BVqU-SuMC3G#} zY|-FVE>7Su!SyReSo5G=ai86U!xHWg|Fgc+}&C5lN_$;Ivs89VnqP%-w$vpFwy9i zisUBx&YKRKl6UlQ?rUj$`#O(3BqD0YwUL1$n*hd|;=E%Q*2IoYen)f|n^;dp73E$A z89rPuS&NQJ31tIDCkyB@LD3W|nB-cmBpoQx!V7Y*U9BWvj;VP$_)c(__SLwLX#%}n_$Knslfxysy2_mNE+uklLF#8P#sbi==q zT9B}}Kt}6PInvd=?5qg192h%Q*7CN4*2|6^hACCgyS*VrF$8?vA9Dl3(_J)27uP5a zEpD5~bMup0qApuvn9rvUK;PCQ*DDL9N@^*1rDtqt@~xSg+bf z9%gWC<48KHFMz9rKC^C8Qr#YspqR`q7BiH$kPH`41TjQ%O+n>nhLDKBe}oj*uL zXw{6xl3vYMyah2NKj13hYfAg_b