EZ Proxy

Archived

The EZProxy application normalizes EZProxy events and enables you to analyze EZProxy data using pre-set dashboard views. You can further customize the dashboard and searches to perform in-depth analysis.

Release Details

Version: 5.0.0

Release date: 2020-05-14

Supported On: LogPoint v6.0.0 and later

SHA 256: 7dabe561786686783815c811ebe1fdcc5eefc2dfef042d0c72ee651501e1e05d

Download

Package Details

Dashboard Package
- LP_EZProxy
Normalization Package
- LP_EZproxy

Enhancement

A minor update has been done in the application’s normalizer for better signature handling.

Installation

Follow these steps to install the EZProxy v5.0.0 plugin:

Download the EZProxy package from the Download section above.
Add the required EZProxy as a device in LogPoint.
Create a collection policy with the Syslog collector and appropriate processing policy.
Assign the policy to the device.
Add the dashboard.

Important Notice

All the normalized field names used in this application are checked and aligned with the LogPoint taxonomy.

Log Format

Expected Log Format

EZProxy

Log Sample

192.168.2.10 - - [04/Dec/2015:11:54:05 +0100] "GET https://xyz.com:443/login?url=http://xyz.com/(S(rhsgqy013sipxznoiqdjzh15))/GetStatusMessage.aspx?trigger=undefined&1449226446543 HTTP/1.1" 200 141 Mozilla/5.0 (Macintosh; Intel Mac OS X 10_9_5) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/46.0.2490.80 Safari/537.36 http://xyz.com/(S(rhsgqy013sipxznoiqdjzh15))/Reader.aspx

To export data to LogPoint use Syslog collector on port 514 on the LogPoint server.

Support

If you have any questions or require assistance, create a support ticket.