Kubernetes

Standard

Kubernetes Plug-In for the Logpoint SIEM allows you to import and normalize Kubernetes logs from a Linux based log source, or an Amazon Elastic Kubernetes Service (EKS) log source imported via CloudWatch.

Release Details

Version: 1.0.0

SHA 256: fb1c136d6d88a633124e0b966701d67c5c54658eaf89c1046d04717dc2be3eec

Download

Package Details

Component
- Kubernetes Alert Rules (4 alert rules) - Install via KB > Alert Rules > Import ( KubernetesAlertRules.pak )
- Kubernetes Audit Compiled Normalizer - Install via System Settings > Configuration > Universal Normalizer > Add > Browse ( KubernetesAuditCompiledNormalizer.pak ) > Upload Config
- Kubernetes Dashboard (8 dashboards) - Install via KB > Dashboards > Import ( KubernetesDashboards.pak )
- Kubernetes Report Template (1 report) - Install via Reports > Report Templates > Import ( KubernetesReportTemplate.pak )
- Kubernetes Search Template (1 report with 3 tabs) - Install via KB > Search Templates > Import ( KubernetesSearchTemplate.pak)

Enhancement

KB-xxxxx

Kubernetes Plug-In Components

Kubernetes Alert Rules (4 alert rules) - Install via KB > Alert Rules > Import (KubernetesAlertRules.pak)
Kubernetes Audit Compiled Normalizer - Install via System Settings > Configuration > Universal Normalizer > Add > Browse (KubernetesAuditCompiledNormalizer.pak) > Upload Config
Kubernetes Dashboard (8 dashboards) - Install via KB > Dashboards > Import (KubernetesDashboards.pak)
Kubernetes Report Template (1 report) - Install via Reports > Report Templates > Import (KubernetesReportTemplate.pak)
Kubernetes Search Template (1 report with 3 tabs) - Install via KB > Search Templates > Import (KubernetesSearchTemplate.pak)

Documentation

The following documentation is available in the attachments:

Kubernetes Plug-In Setup Instructions (Installation Guide)
Kubernetes Logging on EKS
Kubernetes Logging on Linux
Kubernetes Logging Overview

Academy Training

The link to the Academy training is here:

https://academy.logpoint.com/learn/courses/8/logpoint-masterclasses/lessons/138:28/kubernetes

There is also a YouTube video here:

https://youtu.be/rE1ZuUhvyWk

Support

If you have any questions or require assistance, create a support ticket.