NCSCross

Archived

The NCS Cross application normalizes NCS Cross events and enables you to analyze NCS Cross data using pre-set dashboard views. You can further customize the dashboard and searches to perform in-depth analysis.

Release Details

Version: 5.0.0

Release date: 2020-05-14

Supported On: LogPoint v6.0.0 and later

SHA 256: 83fb281d82aba3209aeeebe35f344a01ed8b4627b2f17d37d1293540e3206883

Download

Package Details

Dashboard Package
- LP_NCS Cross
Normalization Packages
- LP_NCS Cross
- LP_NCS Cross v5
- LP_NCS Cross v4

Enhancement

A minor update has been done in the application’s normalizer for better signature handling.

Installation

Follow these steps to install the NCS Cross v5.0.0 plugin:

Download the NCS Cross package from the Download section above.
Add the required NCS Cross server as a device in LogPoint.
Create a collection policy with the Syslog collector and appropriate processing policy.
Assign the policy to the device.
Add the dashboard.

Log Format

Expected Log Format

Comma Separated Values

Log Sample

1645,"2019-05-15-10.25.57.641000","Systeam.EnterpriseServer.AuditLog.Contract.LogData","Info","NCS","TestCity XYZ","SE23210079870081-L001","Medicxxxxxxxxxxxxx Kaxxxxxxxxxxx","SE23210008978081-b535","Medicxxxxxxxxxxxx Kalxxxxxxxxxx VoB Läs SJF ","SE23210098090081-101Q","A04587987840","ABC, BOB","SE2321000081-li0756","xxxx xxx xxxxxxxxxx","Abc T, LIxx","Read","2013-05-14-11.36.25.379332","PÖS","HSAID för Cross","19410529-0417877987","Fxxxxxxx Sxxxxxxxxbvvnv","CareGiver"

To export data to LogPoint use Syslog collector on port 514 on the LogPoint server.

Support

If you have any questions or require assistance, create a support ticket.