|
45 | 45 | }, |
46 | 46 | "variables": { |
47 | 47 | "_solutionName": "SAP S4 Cloud Public Edition", |
48 | | - "_solutionVersion": "3.0.1", |
| 48 | + "_solutionVersion": "3.0.2", |
49 | 49 | "solutionId": "sap_jasondau.azure-sentinel-solution-s4hana-public", |
50 | 50 | "_solutionId": "[variables('solutionId')]", |
51 | 51 | "workspaceResourceId": "[resourceId('microsoft.OperationalInsights/Workspaces', parameters('workspace'))]", |
|
89 | 89 | "title": "SAP S/4HANA Cloud Public Edition", |
90 | 90 | "logo": "SapLogo.svg", |
91 | 91 | "publisher": "SAP", |
92 | | - "descriptionMarkdown": "The SAP S/4HANA Cloud Public Edition data connector enables ingestion of SAP's security audit log into the Microsoft Sentinel Solution for SAP, supporting cross-correlation, alerting, and threat hunting. Looking for alternative authentication mechanisms? See [here](https://github.com/Azure-Samples/Sentinel-For-SAP-Community/tree/main/integration-artifacts).", |
| 92 | + "descriptionMarkdown": "The SAP S/4HANA Cloud Public Edition (GROW with SAP) data connector enables ingestion of SAP's security audit log into the Microsoft Sentinel Solution for SAP, supporting cross-correlation, alerting, and threat hunting. Looking for alternative authentication mechanisms? See [here](https://github.com/Azure-Samples/Sentinel-For-SAP-Community/tree/main/integration-artifacts).", |
93 | 93 | "graphQueriesTableName": "ABAPAuditLog", |
94 | 94 | "graphQueries": [ |
95 | 95 | { |
|
360 | 360 | "destinations": [ |
361 | 361 | "clv2ws1" |
362 | 362 | ], |
363 | | - "transformKql": "source\n| extend TimeGenerated = now(), AgentId = \"S4-Public-Cloud\", ClientID = slgmand, Computer = terminal_name, Email = email_adress, MessageClass = eventID, MessageText = rsau_text, SystemID = sid, UpdatedOn = todatetime(log_tstmp), TransactionCode = slgtc, User = UserID, Variable1 = param_a, Variable2 = param_b, Variable3 = param_c, Variable4 = param_d\n| project TimeGenerated, AgentId, ClientID, Computer, Email, MessageClass, MessageText, SystemID, UpdatedOn, TransactionCode, User, Variable1, Variable2, Variable3, Variable4", |
| 363 | + "transformKql": "source\n| extend TimeGenerated = now(), AgentId = \"S4-Public-Cloud\", ClientId = slgmand, Computer = terminal_name, Email = email_adress, MessageClass = eventID, MessageText = rsau_text, SystemId = sid, UpdatedOn = todatetime(log_tstmp), TransactionCode = slgtc, User = UserID, Variable1 = param_a, Variable2 = param_b, Variable3 = param_c, Variable4 = param_d, AbapProgramName = slgrepna\n| project TimeGenerated, AgentId, ClientId, Computer, Email, MessageClass, MessageText, SystemId, UpdatedOn, TransactionCode, User, Variable1, Variable2, Variable3, Variable4, AbapProgramName", |
364 | 364 | "outputStream": "Microsoft-ABAPAuditLog" |
365 | 365 | } |
366 | 366 | ] |
|
389 | 389 | "title": "SAP S/4HANA Cloud Public Edition", |
390 | 390 | "logo": "SapLogo.svg", |
391 | 391 | "publisher": "SAP", |
392 | | - "descriptionMarkdown": "The SAP S/4HANA Cloud Public Edition data connector enables ingestion of SAP's security audit log into the Microsoft Sentinel Solution for SAP, supporting cross-correlation, alerting, and threat hunting. Looking for alternative authentication mechanisms? See [here](https://github.com/Azure-Samples/Sentinel-For-SAP-Community/tree/main/integration-artifacts).", |
| 392 | + "descriptionMarkdown": "The SAP S/4HANA Cloud Public Edition (GROW with SAP) data connector enables ingestion of SAP's security audit log into the Microsoft Sentinel Solution for SAP, supporting cross-correlation, alerting, and threat hunting. Looking for alternative authentication mechanisms? See [here](https://github.com/Azure-Samples/Sentinel-For-SAP-Community/tree/main/integration-artifacts).", |
393 | 393 | "graphQueriesTableName": "ABAPAuditLog", |
394 | 394 | "graphQueries": [ |
395 | 395 | { |
|
707 | 707 | "apiVersion": "2023-04-01-preview", |
708 | 708 | "location": "[parameters('workspace-location')]", |
709 | 709 | "properties": { |
710 | | - "version": "3.0.1", |
| 710 | + "version": "3.0.2", |
711 | 711 | "kind": "Solution", |
712 | 712 | "contentSchemaVersion": "3.0.0", |
713 | 713 | "displayName": "SAP S4 Cloud Public Edition", |
|
0 commit comments