CorreLog Agent for SAP:
Monitor SAP user activity within your SIEM for security and compliance
Global businesses are running some of their most critical applications on the SAP platform. Users accessing SAP services can number in the thousands at a large enterprise and keeping tabs on their access in real time could be the key to your data security and compliance.
With thousands of users accessing CRM, ERP, Asset Management, Financial Management, Human Resources, Procurement, Product Lifecycle Management and Supply Chain applications on the SAP platform, the potential for breach is high. In these highly-complex and sprawling environments, the need to track user behavior is paramount to maintain security and compliance.
The CorreLog Agent for SAP monitors user accesses to determine activity related to any system or profile changes, including logon and logoff events. User event logs from SAP are collected by the SAP Agent in real time and forwarded to the CorreLog SIEM or other SIEM system such as HP ArcSight, IBM QRadar, Splunk, LogRhythm and many others. This allows the security system administrator to keep track of who is accessing SAP within the SIEM system, including a running log of the activity for compliance and forensics should a breach take place.
The Agent takes existing core SAP message related to user logon/logoffs, transactions, user profile edits/changes, etc., and converts them to Syslog in real time, then normalizes the data for inclusion into the CorreLog or any other SIEM system. Additional SAP messages can be included for conversion with and easy-to-configure Windows-based GUI, depending on the SIEM requirement.
The Agent takes minutes to install and includes all the functions of the CorreLog Windows Toolset (event log monitoring, log file monitoring, remote configuration/deployment) within a very small footprint that utilizes minimal system resource. The SAP Agent is flexible enough to operate in both real-time and batch file mode and includes a comprehensive installation manual along with supplemental utilities to format additional SAP information for Syslog.
New release of CorreLog Agent for SAP expands the number of user audit codes we monitor for security
The new release of CorreLog Agent for SAP version 5.5 increases the number SAP audit codes that can be monitored and converted to Syslog to more than 80. If you would like a review a list of all the audit codes the Agent for SAP can monitor and convert for SIEM please click here and contact us.