SAP Enterprise Threat Detection

The data source type for SAP Enterprise Threat Detection collects events from an SAP Enterprise Threat Detection server. SAP Enterprise Threat Detection enables real-time security intelligence to help protect against cybersecurity threats and help ensure data loss prevention.

To integrate SAP Enterprise Threat Detection with the QRadar® product, complete the following steps:
  1. Configure the QRadar product to receive events from SAP Enterprise Threat Detection. See SAP Enterprise Threat Detection Alert API log source parameters for SAP Enterprise Threat Detection.
  2. Configure SAP Enterprise Threat Detection to communicate with the QRadar product. See the Enterprise ThreatMonitor Integration documentation. (https://www.enterprise-threat-monitor.com/sap-qradar-enterprise-threat-detection-siem-integration/)
  3. Add an SAP Enterprise Threat Detection log source in the QRadar product.

For more information about adding a data source, see Adding ingestion data sources.

If you are an IBM® QRadar user, see Terminology changes for QRadar customers.