Overview of BMC Defender Agent for SAP audit files

SAP audit files consist of fixed-length ASCII text records, that are continuously being appended (without any new-line separators) to an audit file. BMC can read and format these files in either of the following ways:

1. Agent Adapter—You can add the SAP-adapter.dll software to a copy of the agent program, that permits the agent to read the SAP audit file as if it were a regular streaming log file.
2. File Transfer Queue—You can use the File Transfer Queue software to read and format files, where these files are transferred to the BMC Defender Server using a mechanism such as FTP.

Using the adapter, you can construct a simple system that handles an SAP audit log file in a fashion identical to other log files, permitting SAP messages for threading, alerting on, or reporting on SAP messages like any other received message.