You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: articles/sentinel/sap-solution-log-reference.md
+9-13Lines changed: 9 additions & 13 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -17,17 +17,13 @@ ms.subservice: azure-sentinel
17
17
> [!IMPORTANT]
18
18
> The Microsoft Sentinel SAP solution is currently in PREVIEW. The [Azure Preview Supplemental Terms](https://azure.microsoft.com/support/legal/preview-supplemental-terms/) include additional legal terms that apply to Azure features that are in beta, preview, or otherwise not yet released into general availability.
19
19
>
20
+
> Some logs, noted below, are not sent to Microsoft Sentinel by default, but you can manually add them as needed. For more information, see [Define the SAP logs that are sent to Microsoft Sentinel](sap-solution-deploy-alternate.md#define-the-sap-logs-that-are-sent-to-microsoft-sentinel).
21
+
>
20
22
21
23
This article describes the SAP logs available from the Microsoft Sentinel SAP data connector, including the table names in Microsoft Sentinel, the log purposes, and detailed log schemas. Schema field descriptions are based on the field descriptions in the relevant [SAP documentation](https://help.sap.com/).
22
24
23
25
This article is intended for advanced SAP users.
24
26
25
-
## Experimental logs and *Not Released* services
26
-
27
-
- Support for some logs, noted below, is currently experimental. Experimental logs are not sent to Microsoft Sentinel by default, but you can manually add them as needed. For more information, see [Define the SAP logs that are sent to Microsoft Sentinel](sap-solution-deploy-alternate.md#define-the-sap-logs-that-are-sent-to-microsoft-sentinel).
28
-
29
-
- When using the XBP 3.0 interface, the Microsoft Sentinel SAP solution uses *Not Released* services. These services do not affect backend system or connector behavior. To "release" these services, implement the [SAP Note 2910263 - Unreleased XBP functions](https://launchpad.support.sap.com/#/notes/2910263).
30
-
31
27
## ABAP Application log
32
28
33
29
-**Name in Microsoft Sentinel**: `ABAPAppLog_CL`
@@ -161,7 +157,7 @@ This article is intended for advanced SAP users.
161
157
162
158
## ABAP DB table data log
163
159
164
-
Support for this log is experimental. To have this log sent to Microsoft Sentinel, you must [add it manually to the **systemconfig.ini** file](sap-solution-deploy-alternate.md#define-the-sap-logs-that-are-sent-to-microsoft-sentinel).
160
+
To have this log sent to Microsoft Sentinel, you must [add it manually to the **systemconfig.ini** file](sap-solution-deploy-alternate.md#define-the-sap-logs-that-are-sent-to-microsoft-sentinel).
165
161
166
162
-**Name in Microsoft Sentinel**: `ABAPTableDataLog_CL`
167
163
@@ -195,7 +191,7 @@ Support for this log is experimental. To have this log sent to Microsoft Sentine
195
191
196
192
## ABAP Gateway log
197
193
198
-
Support for this log is experimental. To have this log sent to Microsoft Sentinel, you must [add it manually to the **systemconfig.ini** file](sap-solution-deploy-alternate.md#define-the-sap-logs-that-are-sent-to-microsoft-sentinel).
194
+
To have this log sent to Microsoft Sentinel, you must [add it manually to the **systemconfig.ini** file](sap-solution-deploy-alternate.md#define-the-sap-logs-that-are-sent-to-microsoft-sentinel).
199
195
200
196
201
197
-**Name in Microsoft Sentinel**: `ABAPOS_GW_CL`
@@ -218,7 +214,7 @@ Support for this log is experimental. To have this log sent to Microsoft Sentine
218
214
219
215
## ABAP ICM log
220
216
221
-
Support for this log is experimental. To have this log sent to Microsoft Sentinel, you must [add it manually to the **systemconfig.ini** file](sap-solution-deploy-alternate.md#define-the-sap-logs-that-are-sent-to-microsoft-sentinel).
217
+
To have this log sent to Microsoft Sentinel, you must [add it manually to the **systemconfig.ini** file](sap-solution-deploy-alternate.md#define-the-sap-logs-that-are-sent-to-microsoft-sentinel).
222
218
223
219
224
220
-**Name in Microsoft Sentinel**: `ABAPOS_ICM_CL`
@@ -447,7 +443,7 @@ Support for this log is experimental. To have this log sent to Microsoft Sentine
447
443
448
444
## ABAP SysLog
449
445
450
-
Support for this log is experimental. To have this log sent to Microsoft Sentinel, you must [add it manually to the **systemconfig.ini** file](sap-solution-deploy-alternate.md#define-the-sap-logs-that-are-sent-to-microsoft-sentinel).
446
+
To have this log sent to Microsoft Sentinel, you must [add it manually to the **systemconfig.ini** file](sap-solution-deploy-alternate.md#define-the-sap-logs-that-are-sent-to-microsoft-sentinel).
451
447
452
448
453
449
-**Name in Microsoft Sentinel**: `ABAPOS_Syslog_CL`
@@ -534,7 +530,7 @@ Support for this log is experimental. To have this log sent to Microsoft Sentine
534
530
535
531
## ABAP WorkProcess log
536
532
537
-
Support for this log is experimental. To have this log sent to Microsoft Sentinel, you must [add it manually to the **systemconfig.ini** file](sap-solution-deploy-alternate.md#define-the-sap-logs-that-are-sent-to-microsoft-sentinel).
533
+
To have this log sent to Microsoft Sentinel, you must [add it manually to the **systemconfig.ini** file](sap-solution-deploy-alternate.md#define-the-sap-logs-that-are-sent-to-microsoft-sentinel).
538
534
539
535
540
536
-**Name in Microsoft Sentinel**: `ABAPOS_WP_CL`
@@ -562,7 +558,7 @@ Support for this log is experimental. To have this log sent to Microsoft Sentine
562
558
563
559
## HANA DB Audit Trail
564
560
565
-
Support for this log is experimental. To have this log sent to Microsoft Sentinel, you must [add it manually to the **systemconfig.ini** file](sap-solution-deploy-alternate.md#define-the-sap-logs-that-are-sent-to-microsoft-sentinel).
561
+
To have this log sent to Microsoft Sentinel, you must [add it manually to the **systemconfig.ini** file](sap-solution-deploy-alternate.md#define-the-sap-logs-that-are-sent-to-microsoft-sentinel).
566
562
567
563
568
564
-**Name in Microsoft Sentinel**: `Syslog`
@@ -589,7 +585,7 @@ Support for this log is experimental. To have this log sent to Microsoft Sentine
589
585
590
586
## JAVA files
591
587
592
-
Support for this log is experimental. To have this log sent to Microsoft Sentinel, you must [add it manually to the **systemconfig.ini** file](sap-solution-deploy-alternate.md#define-the-sap-logs-that-are-sent-to-microsoft-sentinel).
588
+
To have this log sent to Microsoft Sentinel, you must [add it manually to the **systemconfig.ini** file](sap-solution-deploy-alternate.md#define-the-sap-logs-that-are-sent-to-microsoft-sentinel).
593
589
594
590
595
591
-**Name in Microsoft Sentinel**: `JavaFilesLogsCL`
0 commit comments