HP
ArchivedThe HP application for LogPoint SIEM allows you to monitor and identify threats in your organization using the HP data. LogPoint aggregates and normalizes logs from HP switches, TippingPoint Threat Protection System, HP printers, and HP storage so you can analyze the information through dashboards and security reports. HP's dashboards provide visualization related to HP switches, port status, users activities and authentication details, severities in your network, and interface configurations enabling you to monitor the security status of your organization. You can also adjust dashboards to suit your needs and perform in-depth analysis with customized data and searches.
Release Details
Enhancement
Installation
Follow these steps to install the HP v5.1.0 application:
- Download the HP package from the Download section above.
- Add HP as a device in LogPoint.
- Create a collection policy with the Syslog collector and an appropriate processing policy.
- Assign the policy to the device.
- Add the dashboard.
Past Releases
Change in HP v5.0.1 ▾
Enhancement
6.0.0 to 6.6.6 ▾
Enhancement
Log Formats
Expected Log Format
HP Tipping Point Network
Log Sample
<37>Nov 6 10:10:10 HOSTNAME 7;1;xxxx;yyyy;"19558: TCP: RSA_EXPORT Cipher Suite Negotiation";19558;"tcp";192.168.6.183;443;192.168.3.128;7694;1;got-vpn-vlan27 virtual port A;got-vpn-vlan27 virtual port B;10;27;"xxxxx";83831548;1446798478068; ;35912507
Expected Log Format
HP Switch
Log Sample
FFI: port D7-Excessive CRC/alignment errors. See help. FFI: port B8-Excessive Broadcasts. See help. FFI: port D14-Excessive undersized/giant packets. See help. FFI: port C4-Excessive late collisions.
Expected Log Format
HP IPPM Printer
Log Sample
18/11/19 - 04:50:26 xxxxx xxxx - (xxxx) printer state change - Job 17847 completed 18/11/19 - 04:50:26 xxxxx xxx - (xxxx) job 17847 complete 18/11/19 - 04:50:26 xxxxx xxxx - (xxx) job 17847 active
Expected Log Format
HP SAN SNMP
Log Sample
<6>1 2020-11-26T04:32:43.000000+00:00 srvname APPSV 708 - [details@347 ust="116444736000000000" lst="116444736000000000" ip="1.1.1.1" ssn="A12345" eventPriority="Informational" eventType="181"] Management Controller configuration parameters were set.
Support
If you have any questions or require assistance, create a support ticket.
Comments
Article is closed for comments.