How to Splunk data from SAP ECC AND SAP PI system.

[amdpune]

How to Splunk data from SAP ECC AND SAP PI system? I am looking for specific solutions to get data from SAP ECC and SAP PI systems.
Any pointers here would help ?

[cquinney]

PowerConnect for SAP (https://splunkbase.splunk.com/app/3153/) can be utilized for what you're wanting. However, you'd have to purchase a license for the add-on that sits on the SAP server. Depending on where you're located you can either purchase a license and support through RHONDOS or the BNW directly.

Rhondos.com

http://www.powerconnect.io/contact-us/

YouTube video on how PowerConnect works: https://youtu.be/s-76bGvRMPE

Again, PowerConnect is the ONLY SAP-certified app that sits in the SAP ABAP layer and pushes data into Splunk.

[abapXperts]

PowerConnect is the ONLY SAP-certified app that sits in the SAP ABAP layer and pushes data into Splunk.
That is entirely incorrect. e.g. SecurityBridge is certified by both SAP and Splunk:

• See SAP Certified Solutions Directory
• See splunkbase

[abapXperts]

When you look at integration SAP into Splunk for security monitoring capabilities explore https://splunkbase.splunk.com/app/4081/

[hsesterhenn_spl]

Hi,

Martin mentioned some points, I'd like to add a few.

There is an old app called "Splunk for SAP"
https://splunkbase.splunk.com/app/819/
which leverages "SAPninja"
https://code.google.com/archive/p/sapninja/
Looks like this is not very actively developed any more.
But I have heard from other customers that they use the ABAP code of SAPninja an customize it to their needs.

There are also Splunk partners offering an integration:

AgileSI (https://splunkbase.splunk.com/app/1197/) is very security focused.

Looks like there is a very new AND CERTIFIED solution called "Powerconect for Splunk"
http://www.powerconnectforsplunk.com/

You can even use DB Connect (https://splunkbase.splunk.com/app/2686/) if you are able to get a direct connection to the SAP DB.

HTH,

Holger

[martin_mueller]

The key is how you connect into/from SAP and get information written into logfiles, typically. Once you have the data in logfiles you go the regular Splunk way of installing a Universal Forwarder to read and forward.

How you get the data out into logfiles depends - I've seen some dedicated 3rd party products that for example read the SAL, syslog, certain SAP tables, etc. and push that into logfiles, others have bits within their SAP environment that push report-type data into logfiles.

[warwickchai99]

We are the developer of this solution, and the ABAP & Java code is licensed and can only be obtained by contacting us. You can find out contact details here http://www.powerconnect4.com/contact/