Get SAP ETD data into the Splunk Security Add-on for SAP solutions

After installing the Splunk Security Add-on for SAP^® solutions, you must create an input in order to bring in your SAP Enterprise Threat Detection (ETD) data.

Perform the following steps:

1. From the Apps menu, select Splunk Security Add-on for SAP solutions. Selecting the add-on opens the Configuration tab.
2. Select Add to open a dialog box.
3. Enter the required fields, including the URL and other credentials for the SAP ETD instance, and save your changes. For the URL use the following format:

   https://<address>:<port>

4. Select the Inputs tab to configure your first input and get SAP ETD data into the Splunk platform.
5. Select Create New Input to get data in. Fill in the required fields and save your changes.

If you experience any errors during data collection, navigate to the Troubleshooting tab. This tab constantly monitors error logs and you can use the time range filter to examine any past incidents. See Troubleshoot the Splunk Security Add-on for SAP solutions for additional guidance on how to resolve common issues.