Logo
Resources
Documentation Portal Ideas Portal Guardsix Academy License Portal
Resources
Documentation Portal Ideas Portal Guardsix Academy License Portal
Sign in
  1. Guardsix Servicedesk
  2. Products Hub
  3. Marketplace

Sendmail

Archived

The Sendmail application normalizes Sendmail events and enables you to analyze the data using reports and pre-set dashboard views. You can further customize the dashboard and searches to perform in-depth analysis.

Release Details

Version: 5.0.1
Release date: 2020-05-14
Supported On: LogPoint v6.7.0 and later
SHA 256: 89792d712cae3d8a8d51d60a005333f1133cfb293e1db48a7664b3a3cbbebfc7
Download

Package Details

  1. Dashboard Package
    • LP_SendMail
  2. Label Package
    • LP_Sendmail
  3. Report Package
    • LP_Sendmail
  4. Compiled Normalizer
    • SendMailCompiledNormalizer
  5. Normalization Packages
    • LP_Sendmail v8_14_3
    • LP_Sendmail

Enhancement

A minor update has been done in the application’s normalizer for better signature handling.

Installation

Follow these steps to install the Sendmail v5.0.1 application:

  1. Download the Sendmail package from the Download section above.
  2. Add Sendmail as the required device in LogPoint.
  3. Create a collection policy with the Syslog collector and appropriate processing policy.
  4. Assign the policy to the device.
  5. Add the dashboard.

Past Release

For LogPoint v6.0.0 to v6.6.6 ▾
Version: 3.4.0
Release date: 2020-05-14
Supported On: LogPoint v6.0.0 to v6.6.6
SHA 256: bb2eecf2dcba0a2f8b17bdf097bd86ec411e88cb74cf4fb767b921e08bd106ac
Download

Enhancement

A minor update has been done in the application’s normalizer for better signature handling.

Log Format

Expected Log Formats

  1. <date> <time> <host> sendmail/sm-mta[pid]: <qid>: <what>=<value>
  2. <date> <time> sendmail/sm-mta[pid]: <qid>: <what>=<value>

Log Samples

Feb 4 06:10:09 techy sendmail[xxxx]: xxx0e9Mi005380: to=root, ctladdr=root (0/0), delay=00:00:00, xdelay=00:00:00, mailer=relay, pri=32168, relay=[x.x.x.x] [x.x.x.x], dsn=2.0.0, stat=Sent (o140e90B005392 Message accepted for delivery)

<22>Mar 14 07:15:23 sm-mta[xxxxx]: r2E6FNA11301: to=sysa@logpoint.com, delay=00:00:00, xdelay=00:00:00, mailer=relay, pri=3359, relay=logpoint.com.np, dsn=x.x.x, stat=Host unknown (Name server: mailhost.logpoint.com: host not found)

To export data to LogPoint, use Syslog collector on port 514 on the LogPoint server.

Support

If you have any questions or require assistance, create a support ticket.

Comments

Article is closed for comments.

Follow

Related articles

  • Office365
  • SentinelOne
  • ChatGPT Integration
  • Silverfort
  • AWSServices
Consent Required To Proceed
By clicking “I Agree & Download”, you confirm that you are authorized to act on behalf of your organization and you give explicit consent for Guardsix to share your organization’s customer name and log source count with NXLog for the sole purposes of entitlement management, compliance verification, and support delivery related to the embedded NXLog technology in the Guardsix SIEM solution.

This data will not be used for sales or marketing and will not be shared with other third parties. You may withdraw your consent at any time by contacting Guardsix Support; withdrawal will not affect processing already performed.
Cancel I Agree & Download
Privacy policy    EULA    Terms of service   
Copyright © , Guardsix. All rights reserved.

Note: We use cookies that are essential for the smooth functioning of our website.