Ping Identity

Standard

The Ping Identity application normalizes Ping Identity events and enables you to analyze Ping Identity data. You can further customize the searches to perform in-depth analysis.

Release Details

Version: 5.0.0

Release date: 2020-05-14

Supported On: LogPoint v6.0.0 and later

SHA 256: fbf22a87b15e23697895b44b59887d1b6cf33eb07337463d8c80059216e2f843

Download

Package Details

Normalization Package
- LP_Ping Identity

Enhancement

A minor update has been done in the application’s normalizer for better signature handling.

Installation

Follow these steps to install the Ping Identity v5.0.0 plugin:

Download the Ping Identity package from the Download section above.
Add the required device in LogPoint.
Create a collection policy with the Syslog collector and appropriate processing policy.
Assign the policy to the device.

Log Format

Expected Log Format

Ping Identity Format

Log Sample

2015-10-20 03:35:42,885|SSO| 06uQdxmalUembG8XkStlJA==| 1.1.1.1 | https://portal.abc.com/Home| urn:federation:abc| SAML20| externalpingfed.abc.com| IdP| success| HTMLFormANDPingID| | 2005

To export data to LogPoint use Syslog collector on port 514 on the LogPoint server.

Support

If you have any questions or require assistance, create a support ticket.