Deploy the Microsoft Sentinel solution for SAP applications from the content hub

  • Article

This article shows you how to deploy the Microsoft Sentinel solution for SAP applications security content from the content hub to your Microsoft Sentinel workspace. This content makes up the remaining parts of the Microsoft Sentinel solution for SAP.

Prerequisites

To deploy the Microsoft Sentinel solution for SAP applications from the content hub, you need:

  • A Microsoft Sentinel instance.
  • A defined Microsoft Sentinel workspace, and read and write permissions to the workspace.
  • A Microsoft Sentinel for SAP data connector set up.

Check deployment milestones

Track your SAP solution deployment journey through this series of articles:

  1. Deployment overview

  2. Deployment prerequisites

  3. Work with the solution in multiple workspaces (preview)

  4. Prepare your SAP environment

  5. Configure auditing

  6. Deploy the data connector agent

  7. Deploy the Microsoft Sentinel solution for SAP applications from the content hub (You are here)

  8. Configure the Microsoft Sentinel solution for SAP applications

  9. Optional deployment steps:

Deploy the security content from the content hub

Deploy the SAP security content from the Microsoft Sentinel Content hub and Watchlists areas.

Deploying the Microsoft Sentinel solution for SAP applications causes the Microsoft Sentinel for SAP data connector to be displayed in the Microsoft Sentinel Data connectors area. The solution also deploys the SAP - System Applications and Products workbook and SAP-related analytics rules.

To deploy SAP solution security content:

  1. In Microsoft Sentinel, on the left pane, select Content hub (Preview).

    The Content hub (Preview) page displays a filtered, searchable list of solutions.

  2. To open the SAP solution page, select Microsoft Sentinel solution for SAP applications.

  3. In Microsoft Sentinel, go to the Microsoft Sentinel for SAP data connector to confirm the connection:

    Screenshot that shows the Microsoft Sentinel for SAP data connector page.

    SAP ABAP logs are displayed on the Microsoft Sentinel Logs page, under Custom logs:

    Screenshot that shows the SAP ABAP logs in the Custom Logs area in Microsoft Sentinel.

    For more information, see Microsoft Sentinel solution for SAP applications solution logs reference.

Troubleshooting and reference

For troubleshooting information, see these articles:

For reference, see these articles:

Related content