Skip to content

Commit d37bc37

Browse files
Merge pull request #249806 from YoavDaniely/patch-23
Update deployment-solution-configuration.md
2 parents ba2a940 + 86fec05 commit d37bc37

File tree

1 file changed

+6
-6
lines changed

1 file changed

+6
-6
lines changed

articles/sentinel/sap/deployment-solution-configuration.md

Lines changed: 6 additions & 6 deletions
Original file line numberDiff line numberDiff line change
@@ -106,17 +106,17 @@ By default, all analytics rules provided in the Microsoft Sentinel solution for
106106

107107
To enable or disable the ingestion of a specific log:
108108

109-
1. Edit the *systemconfig.ini* file located under */opt/sapcon/SID/* on the connector's VM.
109+
1. Edit the *systemconfig.json* file located under */opt/sapcon/SID/* on the connector's VM.
110110
1. Inside the configuration file, locate the relevant log and do one of the following:
111111
- To enable the log, change the value to `True`.
112112
- To disable the log, change the value to `False`.
113113

114114
For example, to stop ingestion for the `ABAPJobLog`, change its value to `False`:
115115

116116
```
117-
ABAPJobLog = False
117+
"abapjoblog": "True",
118118
```
119-
Review the list of available logs in the [Systemconfig.ini file reference](reference-systemconfig.md#logs-activation-status-section).
119+
Review the list of available logs in the [Systemconfig.json file reference](reference-systemconfig-json.md).
120120

121121
You can also [stop ingesting the user master data tables](sap-solution-deploy-alternate.md#configuring-user-master-data-collection).
122122

@@ -130,9 +130,9 @@ You can also [stop ingesting the user master data tables](sap-solution-deploy-al
130130
To stop ingesting SAP logs into the Microsoft Sentinel workspace, and to stop the data stream from the Docker container, run this command:
131131

132132
```
133-
docker stop sapcon-[SID]
133+
docker stop sapcon-[SID/agent-name]
134134
```
135-
135+
To stop ingesting a specific SID for a multi-SID container you must delete the SID from the connector page UI in Sentinel
136136
The Docker container stops and doesn't send any more SAP logs to the Microsoft Sentinel workspace. This stops both the ingestion and billing for the SAP system related to the connector.
137137

138138
If you need to reenable the Docker container, run this command:
@@ -171,4 +171,4 @@ Reference files:
171171
- [Update script reference](reference-update.md)
172172
- [Systemconfig.ini file reference](reference-systemconfig.md)
173173

174-
For more information, see [Microsoft Sentinel solutions](../sentinel-solutions.md).
174+
For more information, see [Microsoft Sentinel solutions](../sentinel-solutions.md).

0 commit comments

Comments
 (0)