SAP Note 1998675 – Unified ABAP Interface for SAP Enterprise Threat Detection:
The correction instructions will create the required ABAP artifacts to transfer the relevant data to SAP ETD. Afterwards you will have to configure the interface using report SECM_CONFIGURATION. Please refer to the report documentation for further information.
The transfer of data is triggered via report SECM_LOG_2_ESP. Please refer to the report documentation for further information. The report needs to be sheduled as job regularly.
Configuration of the ETD interface and execution of data transfer is secured by authorization object S_SEC_MON. The following roles are delivered with this note (as attachment):
SAP_BC_SEC_MON_ADMINISTRATOR => required for administrators (SECM_CONFIGURATION)
SAP_BC_SEC_MON_EXTRACTOR => requried for extraction and transfer (SECM_LOG_2_ESP)