category: Analytics & SIEM provider: SAP sectionorder: - Connect - Collect commonfields: id: SAPCloudForCustomerC4C version: -1 configuration: - display: Server URL name: url required: true defaultvalue: "" type: 0 section: Connect - display: Username name: username required: true defaultvalue: "" type: 9 section: Connect - display: Report ID name: report_id type: 0 additionalinfo: The unique identifier of the report to retrieve data from SAP Cloud for Customer (C4C). required: true defaultvalue: "" section: Connect - display: Trust any certificate (not secure) name: insecure required: false type: 8 section: Connect - display: Use system proxy settings name: proxy required: false type: 8 section: Connect - section: Collect display: Maximum number of audit events per fetch name: max_fetch type: 0 required: false defaultvalue: '10000' description: 'Integrates with SAP Cloud for Customer (C4C) and collects audit events via its OData Analytics API to boost security monitoring and compliance.' display: SAP Cloud For Customer (C4C) name: SAPCloudForCustomerC4C script: commands: - arguments: - description: | The start date for filtering events. Events newer than or equal to this date will be retrieved. Must be in `DD-MM-YYYY HH:MM:SS` format (e.g., `10-07-2025 14:17:46`). name: start_date required: true - description: | The number of days to include events after the `start_date`. For example, if `start_date` is '10-07-2025 10:00:00' and `days_from_start` is '2', events will be retrieved up to '12-07-2025 10:00:00'. It's recommended to keep this value no more than 5 days to avoid very large result sets. defaultValue: '2' name: days_from_start required: false - description: | Set to true to create events in your system from the retrieved data. If false (default), the command will only display the events without creating them. name: should_push_events predefined: - 'true' - 'false' defaultValue: 'false' required: false auto: PREDEFINED - description: | The maximum number of events to retrieve. If more events match the criteria, only this specified amount will be returned. defaultValue: '10' name: limit required: false description: Retrieves events from the SAP Cloud for Customer API. name: sap-cloud-get-events runonce: false script: '-' type: python subtype: python3 isfetchevents: true dockerimage: demisto/python3:3.12.13.10116658 fromversion: 8.0.0 tests: - No tests (auto formatted) supportedModules: - xsiam