Configuration & Security Analysis – Setup & Configuration

Prerequisites

SAP Cloud Services

For monitoring of your SAP Cloud Services, no prerequisites are required. This monitoring may include data related to custom-developed apps. However, a dedicated monitoring setup for custom apps is not supported.

 

SAP Private Cloud and On-Premise Systems

Before you can monitor with Configuration & Security Analysis in SAP Cloud ALM for operations, you have to connect your private cloud or on premise system and fulfill certain prerequisites here.

  • ST-A/PI
    If possible, please use the latest version and keep it up to date.
    It is recommended to update ST-A/PI always together with the regular product stack support packages to benefit from latest functionality and patches. Please note that these software components may not be part of the regular support package stack but have to be downloaded separately. For ST-A/PI refer to SAP Note 69455 Servicetools for Applications ST-A/PI (ST14, RTCCTOOL, ST12).
  • Minimum Kernel Release
    In addition, we observed that there is a bug in the kernel preventing to sent correct data packages.
    Because of this, the kernel patch level of SAP Note 2878815 'Incorrect Linebreaks in JSON for Binary Data' is mandatory.

The connection to the system can be set up the Landscape Management Service. Please follow the Setting Up Landscape Management guide in SAP Help on how to perform the setup. Hands-on how-to information on the technical setup and a video explaining the details can be found here.

Setup

SAP Cloud Services

Connectivity to SAP Cloud Services does not require a dedicated Setup. You just select those services that are relevant to your monitoring scope and switch them on. 

Initial Data Collection will be within 24 hours. If you experience delay or issues, consider SAP Notes or a ticket on Component SV-CLM-OP-CSA.

Note: Only those SAP Cloud Services and Solutions can be selected that already send data. New services and service types need to be switched on manually. 

Setup Managed Components - Switch Data Collection of Cloud Services ON / OFF

Private Cloud and On Premise Systems

To setup Configuration & Security Analysis follow the monitoring setup guides provided for each of the supported products and make sure that the task 'Configuration Monitoring' is flagged ‘Active' using transaction /n/SDF/ALM_SETUP in step ‘Activate use cases'.

Data Collection Frequencies are fixed and cannot be customized. Typical Data Collection Frequency is "daily".

Housekeeping

The housekeeping for Configuration & Security Analysis in SAP Cloud ALM for operations mainly effects the Configuration and Change Database (CCDB) of the application. The CCDB housekeeping allows to define a retention period in days. A setting for aggregated data is not required because CCDB does not aggregate data.

Instead, it only stores the initial values of configuration items plus their changes. Because only a minor set of items changes over the time there is no huge data growth expected after the initial load. By default, a retention period of 30 days is predefined. To benefit of the Change Analysis capability, it is recommended to use a much higher retention period like 12 months.

The housekeeping can be switched off completely of by setting the retention period to 0 (not recommended).

Customer Support

In case you encounter problems using or setting up Configuration & Security Analysis in SAP Cloud ALM, please report a case using the following components:

  • SV-CLM-OP-CSA  - Configuration & Security Analysis

Please select your SAP Cloud ALM tenant when reporting the case.