Logpoint NDR

Logpoint NDR is a collector that gathers Logpoint NDR logs and real-time notifications, including event timestamps, severity levels, and anomaly information. Logpoint displays these notifications as incidents, which you can investigate further.

Package Details

1. Dashboard Package
   
   • LP_LogpointNDR
2. Compiled Normalizer
   
   • LPNDRCompiledNormalizer
3. Collector
   
   • LogpointNDRCollector
4. Search Template
   
   • LP_LogpointNDR
5. Log Source Template
   
   • Logpoint NDR

Key Information

To view dashboard content created before the upgrade, update the search query and set norm_id to Muninn.