Question

Transfer Core Server logs to the SIEM

  • 5 May 2021
  • 1 reply
  • 102 views

Userlevel 3
Badge +7

Hi SAP team,

How can I transfer the logs stored in files from the Core server to the SIEM?


1 reply

Badge

Hi Basudev,

There are three options:

  1. You can use a log forwarder tool provided by your SIEM vendor, e.g. ArcSight SmartConnector, Splunk Universal Forwarder.
  2. Most SIEM solutions allow collection of logs via a Syslog collector. To send data from the Core server to the Syslog collector, you can
    1. use native Linux Syslog services like rsyslog or syslog-ng, or
    2. approach us and use a special log forwarding tool provided by LogPoint.
       

Reply