CAS Server
CAS Server normalizes CAS Server events and enables you to analyze CAS Server data using pre-set dashboard views.
Package Details
CAS Server components:
- Dashboard Package
- LP_Cas Server
- Normalization Package
- LP_Cas Server
Enhancement
| Description | Issue ID | Reference ID |
|---|---|---|
| Added Syslog Collector based CAS Server log source template, simplifying the log source configuration process. To learn more, go to Creating Log Source via a Template. |
KB-22613 |
- |
Installation
To install CAS Server:
- Download the .pak file from the Download link above.
- Go to Settings >> System Settings from the navigation bar and click Applications.
- Click Import.
- Browse to the downloaded .pak file.
- Click Upload.
Past Release
CAS Server v5.0.0
Release Date: May 14, 2020
Supported On: Logpoint 5.2.0 or later
Download: CASServer_5.0.0.pak
SHA256: 350c8d34a63b6d7a9080be46ae9a9aa02e19329a5d221f1d393caf23df7655a8
Enhancement
A minor update has been done in the CAS Server's normalizer for better signature handling.
Supported Version
CAS Server v3.51
Log Format
CAS Server
Log Sample
2016-02-08 10:35:39,370 INFO com.hub.ins.audit.support.xxxxxxLogAuditTrailManager] - Audit trail record BEGIN ============================================================= WHO: [username: xxxxxxxxxx] WHAT: TGT-xxxxxxxxxxx-xxxxxxxxxxxxxxxxt912bFqDJxxxxxxxxxxxxxxQkaf1PRQxxxxxxxx-wrk ACTION: TICKET_GRANTING_TICKET_CREATED APPLICATION: CAS WHEN: Mon Feb 08 10:35:39 CET 2016 CLIENT IP ADDRESS: xxx.xx.xx.xx SERVER IP ADDRESS: abc.com=============================================================
Comments
Article is closed for comments.