Getting Data In

How to Splunk data from SAP ECC AND SAP PI system.

amdpune
New Member

How to Splunk data from SAP ECC AND SAP PI system? I am looking for specific solutions to get data from SAP ECC and SAP PI systems.
Any pointers here would help ?

Tags (2)
0 Karma

cquinney
Communicator

PowerConnect for SAP (https://splunkbase.splunk.com/app/3153/) can be utilized for what you're wanting. However, you'd have to purchase a license for the add-on that sits on the SAP server. Depending on where you're located you can either purchase a license and support through RHONDOS or the BNW directly.

Rhondos.com

http://www.powerconnect.io/contact-us/

YouTube video on how PowerConnect works: https://youtu.be/s-76bGvRMPE

Again, PowerConnect is the ONLY SAP-certified app that sits in the SAP ABAP layer and pushes data into Splunk.

0 Karma

abapXperts
New Member

PowerConnect is the ONLY SAP-certified app that sits in the SAP ABAP layer and pushes data into Splunk.
That is entirely incorrect. e.g. SecurityBridge is certified by both SAP and Splunk:

0 Karma

abapXperts
New Member

When you look at integration SAP into Splunk for security monitoring capabilities explore https://splunkbase.splunk.com/app/4081/

0 Karma

hsesterhenn_spl
Splunk Employee
Splunk Employee

Hi,

Martin mentioned some points, I'd like to add a few.

There is an old app called "Splunk for SAP"
https://splunkbase.splunk.com/app/819/
which leverages "SAPninja"
https://code.google.com/archive/p/sapninja/
Looks like this is not very actively developed any more.
But I have heard from other customers that they use the ABAP code of SAPninja an customize it to their needs.

There are also Splunk partners offering an integration:

AgileSI (https://splunkbase.splunk.com/app/1197/) is very security focused.

Looks like there is a very new AND CERTIFIED solution called "Powerconect for Splunk"
http://www.powerconnectforsplunk.com/

You can even use DB Connect (https://splunkbase.splunk.com/app/2686/) if you are able to get a direct connection to the SAP DB.

HTH,

Holger

martin_mueller
SplunkTrust
SplunkTrust

The key is how you connect into/from SAP and get information written into logfiles, typically. Once you have the data in logfiles you go the regular Splunk way of installing a Universal Forwarder to read and forward.

How you get the data out into logfiles depends - I've seen some dedicated 3rd party products that for example read the SAL, syslog, certain SAP tables, etc. and push that into logfiles, others have bits within their SAP environment that push report-type data into logfiles.

0 Karma

warwickchai99
Explorer

We are the developer of this solution, and the ABAP & Java code is licensed and can only be obtained by contacting us. You can find out contact details here http://www.powerconnect4.com/contact/

Get Updates on the Splunk Community!

.conf24 | Day 0

Hello Splunk Community! My name is Chris, and I'm based in Canberra, Australia's capital, and I travelled for ...

Enhance Security Visibility with Splunk Enterprise Security 7.1 through Threat ...

 (view in My Videos)Struggling with alert fatigue, lack of context, and prioritization around security ...

Troubleshooting the OpenTelemetry Collector

  In this tech talk, you’ll learn how to troubleshoot the OpenTelemetry collector - from checking the ...