Skip to content

Commit fe88ea0

Browse files
authored
Merge pull request #206852 from limwainstein/sap-public-preview
Sap public preview
2 parents c63da11 + 736c3db commit fe88ea0

21 files changed

+256
-316
lines changed

articles/sentinel/TOC.yml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -412,7 +412,7 @@
412412
href: sap/deploy-data-connector-agent-container.md
413413
- name: Deploy SAP security content
414414
href: sap/deploy-sap-security-content.md
415-
- name: Configure Threat Monitoring for SAP solution
415+
- name: Configure Microsoft Sentinel Solution for SAP
416416
href: sap/deployment-solution-configuration.md
417417
- name: Optional deployment steps
418418
items:

articles/sentinel/sap/collect-sap-hana-audit-logs.md

Lines changed: 9 additions & 11 deletions
Original file line numberDiff line numberDiff line change
@@ -9,12 +9,10 @@ ms.date: 03/02/2022
99

1010
# Collect SAP HANA audit logs in Microsoft Sentinel
1111

12-
[!INCLUDE [Banner for top of topics](../includes/banner.md)]
13-
1412
This article explains how to collect audit logs from your SAP HANA database.
1513

1614
> [!IMPORTANT]
17-
> The Microsoft Sentinel Threat Monitoring for SAP solution is currently in PREVIEW. The [Azure Preview Supplemental Terms](https://azure.microsoft.com/support/legal/preview-supplemental-terms/) include additional legal terms that apply to Azure features that are in beta, preview, or otherwise not yet released into general availability.
15+
> Microsoft Sentinel SAP HANA support is currently in PREVIEW. The [Azure Preview Supplemental Terms](https://azure.microsoft.com/support/legal/preview-supplemental-terms/) include additional legal terms that apply to Azure features that are in beta, preview, or otherwise not yet released into general availability.
1816
1917
If you have SAP HANA database audit logs configured with Syslog, you'll also need to configure your Log Analytics agent to collect the Syslog files.
2018

@@ -51,25 +49,25 @@ If you have SAP HANA database audit logs configured with Syslog, you'll also nee
5149

5250
## Next steps
5351

54-
Learn more about the Microsoft Sentinel Threat Monitoring for SAP solutions:
52+
Learn more about the Microsoft Sentinel Solution for SAP:
5553

56-
- [Deploy Threat Monitoring for SAP](deployment-overview.md)
57-
- [Prerequisites for deploying Threat Monitoring for SAP](prerequisites-for-deploying-sap-continuous-threat-monitoring.md)
54+
- [Deploy Microsoft Sentinel Solution for SAP](deployment-overview.md)
55+
- [Prerequisites for deploying Microsoft Sentinel Solution for SAP](prerequisites-for-deploying-sap-continuous-threat-monitoring.md)
5856
- [Deploy SAP Change Requests (CRs) and configure authorization](preparing-sap.md)
59-
- [Deploy and configure the SAP data connector agent container](deploy-data-connector-agent-container.md)
57+
- [Deploy and configure the container hosting the SAP data connector agent](deploy-data-connector-agent-container.md)
6058
- [Deploy SAP security content](deploy-sap-security-content.md)
61-
- [Deploy the Microsoft Sentinel Threat Monitoring for SAP data connector with SNC](configure-snc.md)
59+
- [Deploy the SAP data connector with SNC](configure-snc.md)
6260
- [Enable and configure SAP auditing](configure-audit.md)
6361

6462
Troubleshooting:
6563

66-
- [Troubleshoot your Microsoft Sentinel Threat Monitoring for SAP solution deployment](sap-deploy-troubleshoot.md)
64+
- [Troubleshoot your Microsoft Sentinel Solution for SAP deployment](sap-deploy-troubleshoot.md)
6765
- [Configure SAP Transport Management System](configure-transport.md)
6866

6967
Reference files:
7068

71-
- [Microsoft Sentinel Threat Monitoring for SAP solution data reference](sap-solution-log-reference.md)
72-
- [Microsoft Sentinel Threat Monitoring for SAP solution: security content reference](sap-solution-security-content.md)
69+
- [Microsoft Sentinel Solution for SAP data reference](sap-solution-log-reference.md)
70+
- [Microsoft Sentinel Solution for SAP: security content reference](sap-solution-security-content.md)
7371
- [Kickstart script reference](reference-kickstart.md)
7472
- [Update script reference](reference-update.md)
7573
- [Systemconfig.ini file reference](reference-systemconfig.md)

articles/sentinel/sap/configure-audit.md

Lines changed: 12 additions & 16 deletions
Original file line numberDiff line numberDiff line change
@@ -1,6 +1,6 @@
11
---
22
title: Enable and configure SAP auditing for Microsoft Sentinel | Microsoft Docs
3-
description: This article shows you how to enable and configure auditing for the Microsoft Sentinel Threat Monitoring solution for SAP, so that you can have complete visibility into your SAP solution.
3+
description: This article shows you how to enable and configure auditing for the Microsoft Sentinel Solution for SAP, so that you can have complete visibility into your SAP solution.
44
author: MSFTandrelom
55
ms.author: andrelom
66
ms.topic: how-to
@@ -9,18 +9,14 @@ ms.date: 04/27/2022
99

1010
# Enable and configure SAP auditing for Microsoft Sentinel
1111

12-
[!INCLUDE [Banner for top of topics](../includes/banner.md)]
13-
14-
This article shows you how to enable and configure auditing for the Microsoft Sentinel Threat Monitoring solution for SAP, so that you can have complete visibility into your SAP solution.
12+
This article shows you how to enable and configure auditing for the Microsoft Sentinel Solution for SAP, so that you can have complete visibility into your SAP solution.
1513

1614
> [!IMPORTANT]
17-
> The Microsoft Sentinel Threat Monitoring for SAP solution is currently in PREVIEW. The [Azure Preview Supplemental Terms](https://azure.microsoft.com/support/legal/preview-supplemental-terms/) include additional legal terms that apply to Azure features that are in beta, preview, or otherwise not yet released into general availability.
18-
>
1915
> We strongly recommend that any management of your SAP system is carried out by an experienced SAP system administrator.
2016
>
2117
> The steps in this article may vary, depending on your SAP sytem's version, and should be considered as a sample only.
2218
23-
Some installations of SAP systems may not have audit log enabled by default. For best results in evaluating the performance and efficacy of the Microsoft Sentinel Threat Monitoring solution for SAP, enable auditing of your SAP system and configure the audit parameters.
19+
Some installations of SAP systems may not have audit log enabled by default. For best results in evaluating the performance and efficacy of the Microsoft Sentinel Solution for SAP, enable auditing of your SAP system and configure the audit parameters.
2420

2521
## Check if auditing is enabled
2622

@@ -73,7 +69,7 @@ Some installations of SAP systems may not have audit log enabled by default. For
7369

7470
### Recommended audit categories
7571

76-
The following table lists Message IDs used by the Threat Monitoring for SAP solution. In order for analytics rules to detect events properly, we strongly recommend configuring an audit policy that includes the message IDs listed below as a minimum.
72+
The following table lists Message IDs used by the Microsoft Sentinel Solution for SAP. In order for analytics rules to detect events properly, we strongly recommend configuring an audit policy that includes the message IDs listed below as a minimum.
7773

7874
| Message ID | Message text | Category name | Event Weighting | Class Used in Rules |
7975
| - | - | - | - | - |
@@ -129,25 +125,25 @@ The following table lists Message IDs used by the Threat Monitoring for SAP solu
129125

130126
## Next steps
131127

132-
Learn more about the Microsoft Sentinel Threat Monitoring for SAP solutions:
128+
Learn more about the Microsoft Sentinel Solution for SAP:
133129

134-
- [Deploy Threat Monitoring for SAP](deployment-overview.md)
135-
- [Prerequisites for deploying Threat Monitoring for SAP](prerequisites-for-deploying-sap-continuous-threat-monitoring.md)
130+
- [Deploy Microsoft Sentinel Solution for SAP](deployment-overview.md)
131+
- [Prerequisites for deploying Microsoft Sentinel Solution for SAP](prerequisites-for-deploying-sap-continuous-threat-monitoring.md)
136132
- [Deploy SAP Change Requests (CRs) and configure authorization](preparing-sap.md)
137-
- [Deploy and configure the SAP data connector agent container](deploy-data-connector-agent-container.md)
133+
- [Deploy and configure the container hosting the SAP data connector agent](deploy-data-connector-agent-container.md)
138134
- [Deploy SAP security content](deploy-sap-security-content.md)
139-
- [Deploy the Microsoft Sentinel Threat Monitoring for SAP data connector with SNC](configure-snc.md)
135+
- [Deploy the SAP data connector with SNC](configure-snc.md)
140136
- [Collect SAP HANA audit logs](collect-sap-hana-audit-logs.md)
141137

142138
Troubleshooting:
143139

144-
- [Troubleshoot your Microsoft Sentinel Threat Monitoring for SAP solution deployment](sap-deploy-troubleshoot.md)
140+
- [Troubleshoot your Microsoft Sentinel Solution for SAP deployment](sap-deploy-troubleshoot.md)
145141
- [Configure SAP Transport Management System](configure-transport.md)
146142

147143
Reference files:
148144

149-
- [Microsoft Sentinel Threat Monitoring for SAP solution data reference](sap-solution-log-reference.md)
150-
- [Microsoft Sentinel Threat Monitoring for SAP solution: security content reference](sap-solution-security-content.md)
145+
- [Microsoft Sentinel Solution for SAP data reference](sap-solution-log-reference.md)
146+
- [Microsoft Sentinel Solution for SAP: security content reference](sap-solution-security-content.md)
151147
- [Kickstart script reference](reference-kickstart.md)
152148
- [Update script reference](reference-update.md)
153149
- [Systemconfig.ini file reference](reference-systemconfig.md)

articles/sentinel/sap/configure-snc.md

Lines changed: 15 additions & 20 deletions
Original file line numberDiff line numberDiff line change
@@ -1,23 +1,18 @@
11
---
2-
title: Deploy the Microsoft Sentinel Threat Monitoring for SAP data connector with Secure Network Communications (SNC) | Microsoft Docs
3-
description: This article shows you how to deploy the **Microsoft Sentinel data connector for SAP** to ingest NetWeaver/ABAP logs over a secure connection using Secure Network Communications.
4-
author: batamig
5-
ms.author: bagol
2+
title: Deploy the Microsoft Sentinel for SAP data connector with Secure Network Communications (SNC) | Microsoft Docs
3+
description: This article shows you how to deploy the Microsoft Sentinel for SAP data connector to ingest NetWeaver/ABAP logs over a secure connection using Secure Network Communications.
4+
author: limwainstein
5+
ms.author: lwainstein
66
ms.topic: how-to
77
ms.custom: mvc, ignite-fall-2021
88
ms.date: 05/03/2022
99
---
1010

11-
# Deploy the Microsoft Sentinel Threat Monitoring for SAP data connector with SNC
11+
# Deploy the Microsoft Sentinel for SAP data connector with SNC
1212

13-
[!INCLUDE [Banner for top of topics](../includes/banner.md)]
13+
This article shows you how to deploy the **Microsoft Sentinel for SAP** data connector to ingest NetWeaver/ABAP logs over a secure connection using Secure Network Communications (SNC).
1414

15-
This article shows you how to deploy the **Microsoft Sentinel data connector for SAP** to ingest NetWeaver/ABAP logs over a secure connection using Secure Network Communications (SNC).
16-
17-
> [!IMPORTANT]
18-
> The Microsoft Sentinel Threat Monitoring for SAP solution is currently in PREVIEW. The [Azure Preview Supplemental Terms](https://azure.microsoft.com/support/legal/preview-supplemental-terms/) include additional legal terms that apply to Azure features that are in beta, preview, or otherwise not yet released into general availability.
19-
20-
The Threat Monitoring for SAP data connector agent typically connects to an SAP ABAP server using an RFC connection, and a user's username and password for authentication.
15+
The SAP data connector agent typically connects to an SAP ABAP server using an RFC connection, and a user's username and password for authentication.
2116

2217
However, some environments may require the connection be over an encrypted channel, and client certificates be used for authentication. In these cases you can use SAP Secure Network Communication for this purpose, and you'll have to take the appropriate steps as outlined in this article.
2318

@@ -182,26 +177,26 @@ For additional information on options available in the kickstart script, review
182177
183178
## Next steps
184179
185-
Learn more about the Microsoft Sentinel Threat Monitoring for SAP solutions:
180+
Learn more about the Microsoft Sentinel Solution for SAP:
186181
187-
- [Deploy Threat Monitoring for SAP](deployment-overview.md)
188-
- [Prerequisites for deploying Threat Monitoring for SAP](prerequisites-for-deploying-sap-continuous-threat-monitoring.md)
182+
- [Deploy Microsoft Sentinel Solution for SAP](deployment-overview.md)
183+
- [Prerequisites for deploying Microsoft Sentinel Solution for SAP](prerequisites-for-deploying-sap-continuous-threat-monitoring.md)
189184
- [Deploy SAP Change Requests (CRs) and configure authorization](preparing-sap.md)
190-
- [Deploy and configure the SAP data connector agent container](deploy-data-connector-agent-container.md)
185+
- [Deploy and configure the container hosting the SAP data connector agent](deploy-data-connector-agent-container.md)
191186
- [Deploy SAP security content](deploy-sap-security-content.md)
192-
- [Deploy the Microsoft Sentinel Threat Monitoring for SAP data connector with SNC](configure-snc.md)
187+
- [Deploy the Microsoft Sentinel Solution for SAP](configure-snc.md)
193188
- [Enable and configure SAP auditing](configure-audit.md)
194189
- [Collect SAP HANA audit logs](collect-sap-hana-audit-logs.md)
195190
196191
Troubleshooting:
197192
198-
- [Troubleshoot your Microsoft Sentinel Threat Monitoring for SAP solution deployment](sap-deploy-troubleshoot.md)
193+
- [Troubleshoot your Microsoft Sentinel Solution for SAP deployment](sap-deploy-troubleshoot.md)
199194
- [Configure SAP Transport Management System](configure-transport.md)
200195
201196
Reference files:
202197
203-
- [Microsoft Sentinel Threat Monitoring for SAP solution data reference](sap-solution-log-reference.md)
204-
- [Microsoft Sentinel Threat Monitoring for SAP solution: security content reference](sap-solution-security-content.md)
198+
- [Microsoft Sentinel Solution for SAP data reference](sap-solution-log-reference.md)
199+
- [Microsoft Sentinel Solution for SAP: security content reference](sap-solution-security-content.md)
205200
- [Kickstart script reference](reference-kickstart.md)
206201
- [Update script reference](reference-update.md)
207202
- [Systemconfig.ini file reference](reference-systemconfig.md)

articles/sentinel/sap/configure-transport.md

Lines changed: 11 additions & 16 deletions
Original file line numberDiff line numberDiff line change
@@ -1,19 +1,14 @@
11
---
22
title: Configure SAP Transport Management System to connect from Microsoft Sentinel | Microsoft Docs
3-
description: This article shows you how to configure the SAP Transport Management System in the event of an error or in a lab environment where it hasn't already been configured, in order to successfully deploy the Threat Monitoring solution for SAP in Microsoft Sentinel.
3+
description: This article shows you how to configure the SAP Transport Management System in the event of an error or in a lab environment where it hasn't already been configured, in order to successfully deploy the Microsoft Sentinel Solution for SAP.
44
author: MSFTandrelom
55
ms.author: andrelom
66
ms.topic: how-to
77
ms.date: 04/07/2022
88
---
99
# Configure SAP Transport Management System to connect from Microsoft Sentinel
1010

11-
[!INCLUDE [Banner for top of topics](../includes/banner.md)]
12-
13-
This article shows you how to configure the SAP Transport Management System in order to successfully deploy the Threat Monitoring solution for SAP in Microsoft Sentinel.
14-
15-
> [!IMPORTANT]
16-
> The Microsoft Sentinel Threat Monitoring for SAP solution is currently in PREVIEW. The [Azure Preview Supplemental Terms](https://azure.microsoft.com/support/legal/preview-supplemental-terms/) include additional legal terms that apply to Azure features that are in beta, preview, or otherwise not yet released into general availability.
11+
This article shows you how to configure the SAP Transport Management System in order to successfully deploy the Microsoft Sentinel Solution for SAP.
1712

1813
SAP's Transport Management System is normally already configured on production systems. However, in a lab environment, where CRs often haven't been previously installed, configuration may be required.
1914

@@ -72,30 +67,30 @@ The following steps show the process for configuring the Transport Management Sy
7267

7368
## Next steps
7469

75-
Now that you've configured the Transport Management System, you'll be able to successfully complete the `STMS_IMPORT` transaction and you can continue [preparing your SAP environment](preparing-sap.md) for deploying the Threat Monitoring solution for SAP in Microsoft Sentinel.
70+
Now that you've configured the Transport Management System, you'll be able to successfully complete the `STMS_IMPORT` transaction and you can continue [preparing your SAP environment](preparing-sap.md) for deploying the Microsoft Sentinel Solution for SAP in Microsoft Sentinel.
7671

7772
> [!div class="nextstepaction"]
7873
> [Deploy SAP Change Requests and configure authorization](preparing-sap.md#import-the-crs)
7974
80-
Learn more about the Microsoft Sentinel Threat Monitoring for SAP solutions:
75+
Learn more about the Microsoft Sentinel Solution for SAP:
8176

82-
- [Deploy Threat Monitoring for SAP](deployment-overview.md)
83-
- [Prerequisites for deploying Threat Monitoring for SAP](prerequisites-for-deploying-sap-continuous-threat-monitoring.md)
77+
- [Deploy Microsoft Sentinel Solution for SAP](deployment-overview.md)
78+
- [Prerequisites for deploying Microsoft Sentinel Solution for SAP](prerequisites-for-deploying-sap-continuous-threat-monitoring.md)
8479
- [Deploy SAP Change Requests (CRs) and configure authorization](preparing-sap.md)
85-
- [Deploy and configure the SAP data connector agent container](deploy-data-connector-agent-container.md)
80+
- [Deploy and configure the container hosting the SAP data connector agent](deploy-data-connector-agent-container.md)
8681
- [Deploy SAP security content](deploy-sap-security-content.md)
87-
- [Deploy the Microsoft Sentinel Threat Monitoring for SAP data connector with SNC](configure-snc.md)
82+
- [Deploy the Microsoft Sentinel Solution for SAP data connector with SNC](configure-snc.md)
8883
- [Enable and configure SAP auditing](configure-audit.md)
8984
- [Collect SAP HANA audit logs](collect-sap-hana-audit-logs.md)
9085

9186
Troubleshooting:
9287

93-
- [Troubleshoot your Microsoft Sentinel Threat Monitoring for SAP solution deployment](sap-deploy-troubleshoot.md)
88+
- [Troubleshoot your Microsoft Sentinel Solution for SAP deployment](sap-deploy-troubleshoot.md)
9489

9590
Reference files:
9691

97-
- [Microsoft Sentinel Threat Monitoring for SAP solution data reference](sap-solution-log-reference.md)
98-
- [Microsoft Sentinel Threat Monitoring for SAP solution: security content reference](sap-solution-security-content.md)
92+
- [Microsoft Sentinel Solution for SAP data reference](sap-solution-log-reference.md)
93+
- [Microsoft Sentinel Solution for SAP: security content reference](sap-solution-security-content.md)
9994
- [Kickstart script reference](reference-kickstart.md)
10095
- [Update script reference](reference-update.md)
10196
- [Systemconfig.ini file reference](reference-systemconfig.md)

0 commit comments

Comments
 (0)