Merge pull request #222697 from limwainstein/sap-auto-update

Sap auto update

Author: v-ccolin

articles/sentinel/sap/update-sap-data-connector.md

@@ -1,25 +1,62 @@
 ---
-title: Update Microsoft Sentinel's SAP data connector agent | Microsoft Docs
+title: Update Microsoft Sentinel's SAP data connector agent
 description: This article shows you how to update an already existing SAP data connector to its latest version.
 author: MSFTandrelom
 ms.author: andrelom
-ms.topic: reference
-ms.date: 11/07/2022
+ms.topic: how-to
+ms.date: 12/31/2022
 ---
 
 # Update Microsoft Sentinel's SAP data connector agent
 
 This article shows you how to update an already existing Microsoft Sentinel for SAP data connector to its latest version.
 
-If you have a Docker container already running with an earlier version of the SAP data connector, run the SAP data connector update script to get the latest features available.
+To get the latest features, you can [enable automatic updates](#automatically-update-the-sap-data-connector-agent-preview) for the SAP data connector agent, or [manually update the agent](#manually-update-sap-data-connector-agent).
 
-## Update SAP data connector agent
+Note that the automatic or manual updates described in this article are relevant to the SAP connector agent only, and not to the Microsoft Sentinel Solution for SAP. To successfully update the solution, your agent needs to be up to date. The solution is updated separately.
 
-Make sure that you have the most recent versions of the relevant deployment scripts from the Microsoft Sentinel GitHub repository. 
+## Automatically update the SAP data connector agent (Preview)
+
+You can choose to enable automatic updates for the connector agent on [all existing containers](#enable-automatic-updates-on-all-existing-containers) or a [specific container](#enable-automatic-updates-on-a-specific-container).
+
+> [!IMPORTANT]
+> Automatically updating the SAP data connector agent is currently in PREVIEW. The [Azure Preview Supplemental Terms](https://azure.microsoft.com/support/legal/preview-supplemental-terms/) include additional legal terms that apply to Azure features that are in beta, preview, or otherwise not yet released into general availability.
+
+### Enable automatic updates on all existing containers
+
+To enable automatic updates on all existing containers (all containers with a connected SAP agent), run the following command on the collector VM:
+
+```
+wget -O sapcon-sentinel-auto-update.sh https://raw.githubusercontent.com/Azure/Azure-Sentinel/master/Solutions/SAP/sapcon-sentinel-auto-update.sh && bash ./sapcon-sentinel-auto-update.sh 
+```
+    
+The command creates a cron job that runs daily and checks for updates. If the job detects a new version of the agent, it updates the agent on all containers that exist when you run the command above. If a container is running a Preview version that is newer than the latest version (the version that the job installs), the job doesn't update that container. 
+
+If you add containers after you run the cron job, the new containers are not automatically updated. To update these containers, in the */opt/sapcon/[SID or Agent GUID]/settings.json* file, define the `auto_update` parameter for each of the containers as `true`.
+
+The logs for this update are under *var/log/sapcon-sentinel-register-autoupdate.log/*.
+
+### Enable automatic updates on a specific container
+
+To enable automatic updates on a specific container or containers, run the following command:
+
+```
+wget -O sapcon-sentinel-auto-update.sh https://raw.githubusercontent.com/Azure/Azure-Sentinel/master/Solutions/SAP/sapcon-sentinel-auto-update.sh && bash ./sapcon-sentinel-auto-update.sh --containername <containername> [--containername <containername>]...
+```
+
+The logs for this update are under */var/log/sapcon-sentinel-register-autoupdate.log*. 
+
+### Disable automatic updates
+
+To disable automatic updates for a container or containers, define the `auto_update` parameter for each of the containers as `false`.
+
+## Manually update SAP data connector agent
+
+To manually update the connector agent, make sure that you have the most recent versions of the relevant deployment scripts from the Microsoft Sentinel GitHub repository. 
 
 Run:
 
-```azurecli
+```
 wget -O sapcon-instance-update.sh https://raw.githubusercontent.com/Azure/Azure-Sentinel/master/Solutions/SAP/sapcon-instance-update.sh && bash ./sapcon-instance-update.sh
 ```
 

articles/sentinel/whats-new.md

@@ -17,6 +17,12 @@ See these [important announcements](#announcements) about recent changes to feat
 
 [!INCLUDE [reference-to-feature-availability](includes/reference-to-feature-availability.md)]
 
+## March 2023
+
+### Automatically update the SAP data connector agent (Preview)
+
+You can now [enable automatic updates for the SAP data connector agent](sap/update-sap-data-connector.md#automatically-update-the-sap-data-connector-agent-preview). You can choose to apply automatic updates to all existing containers or to a specific container.
+
 ## February 2023
 
 - [Out-of-the-box content centralization changes](#out-of-the-box-content-centralization-changes) (in [Announcements](#announcements) section below)
@@ -54,7 +60,6 @@ To give you more flexibility in scheduling your analytics rule execution times a
 
 [Learn more about advanced scheduling](detect-threats-custom.md#query-scheduling-and-alert-threshold).
 
-
 ## January 2023
 
 - [New incident investigation experience (Preview)](#new-incident-investigation-experience-preview)