We are providing you with the steps to integrate your SAP Application with Seceon SIEM so One can have Comprehensive visibility and Proactive Threat Detection in your Environment. There will be a log transfer between your firewall to APE(Analytics and Policy Engine) via CCE (Collection and Control Engine ). In this document, we are guiding you through the steps for Log forwarding.
Configuring Logs Receiver(https listener) from CCE end
Go to CCE’s package directory, example -
Run ./setup.sh -sap
Type yes and press enter to enable http listener for SAP Application
if LTS present:
Check cce-logs-manager’s logs (using otmdoc -l cce-logs-manager)
else
Check cce-logs-processor’s logs (using otmdoc -l cce-logs-processor)
If you see - Starting http input listener {:address=>CCE-IP:63514", :ssl=>"false"} in cce-logs-processor’s or cce-logs-manager’s(if LTS present) logs it means things are working, example -