Perago

Archived

The Perago application normalizes Perago events and enables you to analyze Perago data using pre-set dashboard views. You can further customize the dashboard and searches to perform in-depth analysis.

Release Details

Version: 5.0.0

Release date: 2020-05-14

Supported On: LogPoint v6.0.0 and later

SHA 256: 8201be5ed27355f82e558ff5c2c54d04686f56e6319b055bcca0b943d355dd3a

Download

Package Details

Dashboard Package
- LP_Perago
Normalization Package
- LP_Perago

Enhancement

A minor update has been done in the application’s normalizer for better signature handling.

Installation

Follow these steps to install the Perago v5.0.0 plugin:

Download the Perago package from the Download section above.
Add the required Perago as a device in LogPoint.
Create a collection policy with the Syslog collector and appropriate processing policy.
Assign the policy to the device.
Add the dashboard.

Log Format

Expected Log Format

Perago

Log Sample

<14>Mar 23 06:28:05 Mar 23 06:28:05 xyz.com GenericLog 0 0 0 0 Perago:Access(web)~2019-03-23 06:28:04.317~T~P~SYSTEM~27201494~ERU7~~SYSTEM requested Report : CA007 - Access Event And Change Log

<14>Oct 26 12:17:15 Oct 26 12:17:15 rtxxx.customer.se GenericLog 0 0 0 0 Perago:Access(server)~2019-10-26 12:17:14.485~C~E~EHADMIN~RIKSSESR~ACS2~~User QSCOFOX Enabled <14>Sep 29 09:53:54 Sep 29 09:53:54 r.c.se GenericLog 0 0 0 0 Perago:Access(server)~2019-09-29 09:53:53.879~C~E~IGADMIN~CUSTESR~ACS2~~User ABC Disabled

To export data to LogPoint, use Syslog collector on port 514 on the LogPoint server.

Support

If you have any questions or require assistance, create a support ticket.