ActivTrak
StandardActivTrak normalizes ActivTrak events. You can further customize the searches to perform in-depth analysis.
Release Details
Package Details
- Normalization Package
- LP_Activtrak
Enhancement
KB-22858
Added Syslog Collector based ActivTrak log source template, simplifying the log source configuration process. To learn more, go to Creating Log Source via a Template .
Installation
To install ActivTrak:
- Download the .pak file from the Download link above.
- Go to Settings >> System Settings from the navigation bar and click Applications .
- Click Import .
- Browse to the downloaded .pak file.
- Click Upload .
Past Release
ActivTrak v5.0.0 ▾
Enhancement
A minor update has been done in the ActivTrak's normalizer for better signature handling.
Log Format
Expected Log Format
ActivTrak format
Log Sample
23/09/2015 09:12:06 G002104 LPGROUP 172.16.219.69 LPGROUP PPO 1 18 Inbox - test@abc.com - Microsoft Outlook OUTLOOK.EXE Microsoft Outlook
To export data to LogPoint use the Syslog collector on port 514 on the LogPoint server.
Support
If you have any questions or require assistance, create a support ticket.
Comments
Article is closed for comments.