What is SAP SIEM?

SAP security information and event management software products and services combine SAP specific security information management (SIM) and security event management (SEM). They provide real-time analysis of security alerts generated by SAP applications.

SAP SIEM tools typically provide their own security exception management functions.

Enterprise Threat Monitor is a SAP SIEM tool which focuses on efficient management of SAP security events based on various log sources such as SAP security audit log (SM19 log) and SAP change documents.

Enterprise Threat Monitor works stand alone as well as in conjunction with popular network SIEM products such as ArcSight, QRadar or Splunk.

Enterprise Threat Monitor acts as a bridge between your SAP systems and your SIEM platform.

It retrieves the security event information from SAP and uses machine learning to eliminate false positives.

The results are high quality events which are sent to your SIEM platform.