topic Re: How to Splunk data from SAP ECC AND SAP PI system. in Getting Data In

How to Splunk data from SAP ECC AND SAP PI system.

amdpune — Fri, 12 Feb 2016 08:54:02 GMT

How to Splunk data from SAP ECC AND SAP PI system? I am looking for specific solutions to get data from SAP ECC and SAP PI systems.
Any pointers here would help ?

Re: How to Splunk data from SAP ECC AND SAP PI system.

martin_mueller — Fri, 12 Feb 2016 10:09:57 GMT

The key is how you connect into/from SAP and get information written into logfiles, typically. Once you have the data in logfiles you go the regular Splunk way of installing a Universal Forwarder to read and forward.

How you get the data out into logfiles depends - I've seen some dedicated 3rd party products that for example read the SAL, syslog, certain SAP tables, etc. and push that into logfiles, others have bits within their SAP environment that push report-type data into logfiles.

Re: How to Splunk data from SAP ECC AND SAP PI system.

hsesterhenn_spl — Sat, 13 Feb 2016 08:19:57 GMT

Hi,

Martin mentioned some points, I'd like to add a few.

There is an old app called "Splunk for SAP"
https://splunkbase.splunk.com/app/819/
which leverages "SAPninja"
https://code.google.com/archive/p/sapninja/
Looks like this is not very actively developed any more.
But I have heard from other customers that they use the ABAP code of SAPninja an customize it to their needs.

There are also Splunk partners offering an integration:

AgileSI (https://splunkbase.splunk.com/app/1197/) is very security focused.

Looks like there is a very new AND CERTIFIED solution called "Powerconect for Splunk"
http://www.powerconnectforsplunk.com/

You can even use DB Connect (https://splunkbase.splunk.com/app/2686/) if you are able to get a direct connection to the SAP DB.

HTH,

Holger

Re: How to Splunk data from SAP ECC AND SAP PI system.

warwickchai99 — Tue, 26 Jun 2018 13:02:20 GMT

We are the developer of this solution, and the ABAP & Java code is licensed and can only be obtained by contacting us. You can find out contact details here http://www.powerconnect4.com/contact/

Re: How to Splunk data from SAP ECC AND SAP PI system.

abapXperts — Tue, 07 Aug 2018 11:35:35 GMT

When you look at integration SAP into Splunk for security monitoring capabilities explore https://splunkbase.splunk.com/app/4081/

Re: How to Splunk data from SAP ECC AND SAP PI system.

cquinney — Wed, 14 Aug 2019 14:52:17 GMT

PowerConnect for SAP (https://splunkbase.splunk.com/app/3153/) can be utilized for what you're wanting. However, you'd have to purchase a license for the add-on that sits on the SAP server. Depending on where you're located you can either purchase a license and support through RHONDOS or the BNW directly.

Rhondos.com

http://www.powerconnect.io/contact-us/

YouTube video on how PowerConnect works: https://youtu.be/s-76bGvRMPE

Again, PowerConnect is the ONLY SAP-certified app that sits in the SAP ABAP layer and pushes data into Splunk.

Re: How to Splunk data from SAP ECC AND SAP PI system.

abapXperts — Thu, 21 Nov 2019 09:23:29 GMT

PowerConnect is the ONLY SAP-certified app that sits in the SAP ABAP layer and pushes data into Splunk.
That is entirely incorrect. e.g. SecurityBridge is certified by both SAP and Splunk:

See SAP Certified Solutions Directory
See splunkbase