You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: articles/sentinel/sap/deploy-sap-security-content.md
+33Lines changed: 33 additions & 0 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -51,6 +51,8 @@ To deploy a Microsoft Sentinel solution for SAP applications from the content hu
51
51
52
52
Make sure that you also review the [prerequisites for deploying Microsoft Sentinel solution for SAP applications](prerequisites-for-deploying-sap-continuous-threat-monitoring.md), especially [Azure prerequisites](prerequisites-for-deploying-sap-continuous-threat-monitoring.md#azure-prerequisites).
53
53
54
+
:::zone pivot="connection-agentless"
55
+
54
56
## Install the solution
55
57
56
58
Installing the **Microsoft Sentinel Solution for SAP** makes both the data connector agent and the agentless data connector available to you from the Microsoft Sentinel **Configuration > Data connectors** page. The solution also deploys security content, such as the **SAP -Audit Controls** workbook and SAP-related analytics rules.
@@ -76,6 +78,37 @@ Installing the **Microsoft Sentinel Solution for SAP** makes both the data conne
76
78
77
79
For more information, see [Discover and manage Microsoft Sentinel out-of-the-box content](../sentinel-solutions-deploy.md).
78
80
81
+
:::zone-end
82
+
83
+
:::zone pivot="connection-agent"
84
+
85
+
## Install the solution
86
+
87
+
Installing the **Microsoft Sentinel Solution for SAP** makes both the data connector agent and the agentless data connector available to you from the Microsoft Sentinel **Configuration > Data connectors** page. The solution also deploys security content, such as the **SAP -Audit Controls** workbook and SAP-related analytics rules.
88
+
89
+
1. In the Microsoft Sentinel **Content hub**, search for **SAP** to install the **SAP applications** solution.
90
+
91
+
1. On the **Microsoft Sentinel solution for SAP applications** page, select **Create** to define deployment settings. For example:
92
+
93
+
:::image type="content" source="./media/deploy-sap-security-content/sap-solution.png" alt-text="Screenshot that shows the Microsoft Sentinel solution for SAP applications solution pane." lightbox="./media/deploy-sap-security-content/sap-solution.png":::
94
+
95
+
1. On the default **Basics** tab, scroll down to select where to install the solution. If you're working with [the Microsoft Sentinel solution for SAP applications in multiple workspaces](cross-workspace.md), select **Some of the data is on a different workspace**, and then define your target workspace, your SOC workspace, and SAP workspace. For example:
96
+
97
+
For example:
98
+
99
+
:::image type="content" source="./media/deploy-sap-security-content/sap-multi-workspace.png" alt-text="Screenshot that shows how to configure the Microsoft Sentinel solution for SAP applications to work across multiple workspaces.":::
100
+
101
+
1. Select **Review + create** or **Next** to browse through the solution components. When you're ready, select **Create**
102
+
103
+
The deployment process can take a few minutes. After the deployment is finished, you can view the deployed content in Microsoft Sentinel.
104
+
105
+
> [!TIP]
106
+
> If you want the SAP and SOC data to be kept on the same workspace with no additional access controls, do not select **Some of the data is on a different workspace**. In such cases, for more information, see [SAP and SOC data maintained in the same workspace](cross-workspace.md#sap-and-soc-data-maintained-in-the-same-workspace).
107
+
108
+
For more information, see [Discover and manage Microsoft Sentinel out-of-the-box content](../sentinel-solutions-deploy.md).
109
+
110
+
:::zone-end
111
+
79
112
## View deployed content
80
113
81
114
When the deployment is finished, display your new content by browsing again to the Microsoft Sentinel for SAP applications solution from the **Content hub**. Alternatively:
0 commit comments