Amazon CloudWatch Monitor for SAP NetWeaver ABAP-based environments

This solution helps you monitor SAP NetWeaver ABAP-based environments via Amazon CloudWatch.

Benefits at a glance:

• Serverless, no infrastructure to manage
• Cost effective, pay per use
• Agentless, using SAP Standard RFCs only
• Provides common SAP System availability & performance metrics
• Customizable and Extensible

Important

Being agentless, this solution also integrates natively into any SAP RISE environment, as long as network connectivity (Guide) is established, see architecture patterns below.

Please see also the original blog post SAP Monitoring: A serverless approach using Amazon CloudWatch for more info on the motivation and concept!

Prerequisites

• SAP NetWeaver ABAP 7.4 or higher (ECC, S4, BW, ...)
  • SAP Component ST-PI Release 740 SP 08 or higher.
  • SAP statistical records enabled (transaction codes stad / st03).
    If not active by default, please check SAP note 2369736.
  • SAP RFC user and password - see "Deploy Solution -> Step 1"
• SAP S-User to download SAP Java Connector – see “Deploy Solution -> Step 2”
• Amazon VPC security group(s) allowing inbound/outbound traffic - see also section “Architecture”:
  • Lambda + SAP@EC2: Port 33<instanceID> or alternatively message server port, so that the Lambda function can connect via the private subnet to the SAP system to be monitored
  • Lambda: Additionally port 443 to call AWS Secrets Manager and CloudWatch APIs. In case of a private subnet without NAT Gateway make sure to create respective private endpoints!
• For Production systems, make sure to enable CloudWatch detailed monitoring according to SAP note 1656250.

Deploy Solution

Please follow the step-by-step guide.

Update Solution

If you have deployed an older version of this solution already via AWS Serverless Application Repository, you can simply update the stack to the latest version as follows:

• Launch an AWS CloudShell instance
• Execute the following statements - creates ChangeSet but keeps parameters unchanged, except password:

wget https://github.com/aws-samples/amazon-cloudwatch-monitor-for-sap-netweaver/raw/master/update.sh
chmod +x update.sh
./update.sh

Architecture

Note: You will have to deploy a single instance of this solution per SAP System ID!

(Self-) Hosted on AWS

For SAP systems running on Amazon EC2 within your own VPC, the architecture looks as follows:

SAP RISE

For SAP RISE on AWS deployments, the architecture looks as follows:

On-premise

You can also use this solution to instrument SAP systems running on-premise or simply anywhere outside AWS as follows:

CloudWatch Dashboards

The resulting dashboards are customizable and may look as follows

Configuration

The following optional parameters can be maintained in AWS Secrets Manager (Secret-Name: sap-monitor-<SID>) and adjusted to your needs:

Parameter	Default	Description
mshost	n/a	SAP Message Server Host
msport	n/a	SAP Message Server Port
group	n/a	SAP Logon Group
language	en	Logon Language
/SDF/SMON_DESC	AWSCW	Collector Name
/SDF/SMON_SCHEDULE	1	Schedule collector automatically
/SDF/SMON_FREQUENCY	30	Collector frequency in seconds. Note: Increase to 60 seconds in case of high system load / large number of app servers. 30 seconds is minimum frequency!
/SDF/SMON_ENQUEUE	1	Collect enqueue statistics. Note: Disable in case of high system load / large number of app servers
we02	0	Collect IDOC Metrics. Note: Requires to copy /SDF/E2E_IDOC to ZE2E_IDOC and set to remote enabled

Further Resources

• Cost Considerations
• Performance & Overhead Considerations
• Known Issues
• Collected Metrics
• Troubleshooting

Changelog

1.09

• Added note for SAP RISE deployments
• Latest AWS SDK (v2)

1.08

• Java 21
• Latest AWS SDK (v1)
• ARM64 (!)

1.07

• New Parameter /SDF/SMON_FREQUENCY -> Allows to increase collector frequency, Default = Min = 30 seconds
• New Parameter /SDF/SMON_ENQUEUE -> Allows to disable collection enqueue statistics (Default: every 10th time)

1.063

• Bug Fix we02 setting

1.062

• Added Update.sh for simplified update to the latest version
• Added Deploy.sh for deployment via AWS CloudFormation instead of AWS Serverless Application Repository

1.06

• Updated Dependencies including latest SAP JCo 3.1.5
• Added new metric: ABAP Dumps (st22)
• Added new metric: cancelled jobs (se37)
• Added new metric: failing Inbound & Outbound IDocs (we02)
• Updated role template

1.05

• Added metric TOTAL_APP_SERVERS (RFC TH_SERVER_LIST)
• Added capability to restart /SDF/SMON in case amount of active app servers changes

1.04

• Added Connectivity via SAP Message Server

License

This project is licensed under

This solution requires the SAP Java Connector from SAP SE to be added manually.

All rights reserved.