Logo
Resources
Documentation Portal Ideas Portal Guardsix Academy License Portal
Resources
Documentation Portal Ideas Portal Guardsix Academy License Portal
Sign in
  1. Guardsix Servicedesk
  2. Products Hub
  3. Marketplace

HAProxy

Archived
 HAProxy events and enables you to analyze HAProxy data. You can further customize the searches to perform an in-depth analysis.

Release Details

Version: 5.0.0
Release date: 2021-01-20
Supported On: LogPoint v6.6.0 and later
SHA 256: ff847eaf1fdc94dba9b337cfc088cdddeb9aea35d828b453d4d3364ff19b6e95
Download

Installation

Follow these steps to install the HAProxy v5.0.0 application:

  1. Download the HAProxy package from the Download section above.
  2. Add the required HAProxy server as a device in LogPoint.
  3. Create a collection policy with the Syslog collector and an appropriate processing policy.
  4. Assign the policy to the device.

Log Format

HAProxy

Expected Log Format

log-format %ci:%cp\ [%t]\ %ft\ %b/%s\ %Tq/%Tw/%Tc/%Tr/%Tt\ %ST\ %B\ %CC\ %CS\ %tsc\ %ac/%fc/%bc/%sc/%rc\ %sq/%bq\ %hr\ %hs\{%sslv/%sslc/%[ssl_fc_sni]}

Log Sample

<134>Jan 16 08:36:31 xxxxx haproxy[1087]: xxx.xxx.x.xxx:41439 [16/Jan/2018:08:36:31.245] EXCHANGE~ LOGPOINT/CIM-MAIL-01 0/0/3/74/77 200 877 - - ---- 273/257/116/116/0 0/0 "POST /xxxxx?Cmd=Ping&User=xxxxx&DeviceId=xxxxx&DeviceType=xxxxxxxxxxxxx HTTP/1.1"

To export data to LogPoint, use the Syslog collector on port 514 of the LogPoint server.

Expected Log Format

log-format %ci:%cp\ [%t]\ %ft\ %b/%s\ %Tq/%Tw/%Tc/%Tr/%Tt\ %ST\ %B\ %CC\ %CS\ %tsc\ %ac/%fc/%bc/%sc/%rc\ %sq/%bq\ %hr\ %hs\{%sslv/%sslc/%[ssl_fc_sni]}

Log Sample

<134>Jan 16 08:36:31 xxxxx haproxy[1087]: xxx.xxx.x.xxx:41439 [16/Jan/2018:08:36:31.245] EXCHANGE~ LOGPOINT/CIM-MAIL-01 0/0/3/74/77 200 877 - - ---- 273/257/116/116/0 0/0 "POST /xxxxx?Cmd=Ping&User=xxxxx&DeviceId=xxxxx&DeviceType=xxxxxxxxxxxxx HTTP/1.1"

To export data to LogPoint, use the Syslog collector on port 514 of the LogPoint server.

Support

If you have any questions or require assistance, create a support ticket.

Comments

Article is closed for comments.

Follow

Related articles

  • FortiGate
  • AWSServices
  • Universal Normalizer
  • Hex2Ascii Process Plugin
  • Oracle
Consent Required To Proceed
By clicking “I Agree & Download”, you confirm that you are authorized to act on behalf of your organization and you give explicit consent for Guardsix to share your organization’s customer name and log source count with NXLog for the sole purposes of entitlement management, compliance verification, and support delivery related to the embedded NXLog technology in the Guardsix SIEM solution.

This data will not be used for sales or marketing and will not be shared with other third parties. You may withdraw your consent at any time by contacting Guardsix Support; withdrawal will not affect processing already performed.
Cancel I Agree & Download
Privacy policy    EULA    Terms of service   
Copyright © , Guardsix. All rights reserved.

Note: We use cookies that are essential for the smooth functioning of our website.