Ingesting SAP Business Object Logs

[becksyboy]

Hi,

before we go down the route of feeding the logs into Splunk and writing our own custom TA. Does anyone know if Splunk has an official TA for SAP Business Object logs? I have looked in Splunk Base and cannot find anything.

Log sources we are looking at:
E:\Program Files (x86)\SAP BusinessObjects\SAP BusinessObjects Enterprise XI 4.0\Auditing
E:\Program Files (x86)\SAP BusinessObjects\SAP BusinessObjects Enterprise XI 4.0\logging
E:\ProgramData\SAP BusinessObjects\Data Services\log

I believe we can use the Splunk TA for Tomcat for these:
E:\Program Files (x86)\SAP BusinessObjects\tomcat
E:\Program Files (x86)\SAP BusinessObjects\tomcat\logs

thanks

[Roy_9]

There is a TA available but it works with SAP ABAP and JAVA logs, I guess you could tweak this add-on a bit if you are interested.

https://splunkbase.splunk.com/app/4953/

Also, did you consider streaming this logs via HEC incase if this supports or install an agent and monitor those files by creating an inputs.conf and then send it to Indexer tier.

[nahtasurbhi]

Hi,

I am also having the same issue and got the best answer from SAP blog - https://www.smore.com/dva3w-5-new-sap-skills-you-could-learn

[nahtasurbhi]

Hi,

I am also having the same issue and got the best answer from SAP blogs.