Can the Public Cloud integrate with a 3rd Party SIEM Solution?

[Gerard_Ward]

We are looking to integrate SAP Public Cloud to MS Azure Sentinel for monitoring purposes. There is an Security Audit Log API available but more log files are required.

Is this possible?

Thank you,

[MarkusRest]

But SecAuditLog needs to be waaay more specific!

for example, if you log in with the same user from two terminals, no one can distinguish, which terminal does what.

[MarkusRest]

++ Table Logs

++ Multilogin tables

++ Extended Transporthistory

[Gerard_Ward]

++ SuccesFactors logs

[Gerard_Ward]

Hello Patrick,

Thanks for your reply.

One of our clients are looking to integrate Sentinel with their Public Cloud solution. They require the following logs to be sent

- Change documents

- Read access logs

- Authorization trace logs

- SAP support user request logs

Is it possible to extract this information?

Thanks,

Gerard

[patrickboch]

Hi Gerard

what log files are you looking for specifically and why?

Please keep in mind that not all events, especially infrastructure related log events, can be shared for confidentiality reasons. Nor would they need to, as we as cloud provider operate our own security infrastructure, including an extensive and comprehensive security monitoring.