RECENTConnector or ingestionAction required
SAP data connectors
Analysis / inference: Containerized SAP data connector retired Sep 14 2026; migrate to GA agentless connector.
- Dates
- Source and collection dates not recorded
- Source
- Microsoft Sentinel - What's new · Limited verification
- Classification
- Microsoft Security
Section 01 · Summary analysis
The containerized SAP data connector agent will be permanently disabled on Sep 14 2026, and the agentless SAP data connector is now generally available as its replacement.
AI summary / analysis; claims are not independently verified. Check the primary source before acting.
Section 02 · Analysis
SecOps Signal analysisWhy it matters
The containerized SAP data connector will stop delivering logs on Sep 14 2026, causing dependent analytics, workbooks, hunting queries, and playbooks to lose data.
Operational impact
SAP logs will cease flowing to Sentinel, causing analytics rules, workbooks, hunting queries, and playbooks that rely on those logs to stop returning results, creating blind spots in monitoring.
Section 03 · Recommended actions
- Migrate all SAP log ingestion to the agentless SAP data connector before Sep 14 2026
- Update or replace any analytics rules, workbooks, hunting queries, and playbooks that reference the containerized connector
- Validate log flow after migration
What to check
- Identify any Sentinel workspaces using the containerized SAP data connector
- Verify which analytics rules, workbooks, hunting queries, or playbooks depend on SAP logs from the containerized connector
- Confirm that the containerized connector is not being newly created
- Check that the agentless SAP data connector is enabled and configured
Affected scope
ProductsMicrosoft Sentinel