UEBA PreConfiguration Plugin
The UEBA PreConfiguration Plugin bundles the necessary components to prepare your input logs for UEBA analysis. UEBA observes the behavior of each user and entity to set a baseline for normal behavior. To set a proper baseline, UEBA requires a minimum of 30 days of the properly normalized and enriched set of data. The UEBA PreConfiguration Plugin installs the enrichment sources and enrichment policy for easy preparation of your data.
Important Notice
You must install the UEBA PreConfiguration Plugin to prepare your input logs for UEBA.
Package Details
The application consists of the following components:
- Enrichment Sources
- UEBA_SourceAddrToHostname
- UEBA_ActiveDirectoryUsers
- UEBA_DestAddrToHostname
- UEBA_ProtocolTable
- Enrichment Policy
-
UEBA_ENRICHMENT_POLICY
-
Enhancement
The application has been updated to comply with LogPoint v6.7.0.
Installation
Follow these steps to install the UEBA PreConfiguration Plugin v5.0.0:
- Download the UEBA_PreConfiguration_5.0.0.pak file provided in the Download section above.
- Install the plugin by importing the pak file to LogPoint under Settings >> System >> Applications.
Refer to the Configuration section of the UEBA PreConfiguration Plugin Manual to view the details on the configuration.
Documentation
You can get the UEBA PreConfiguration Plugin Manual from the Download section above.
Important Notice
You must install the UEBA PreConfiguration Plugin to prepare your input logs for UEBA.
Package Details
The application consists of the following components:
- Enrichment Sources
- UEBA_SourceAddrToHostname
- UEBA_ActiveDirectoryUsers
- UEBA_DestAddrToHostname
- UEBA_ProtocolTable
- Enrichment Policy
-
UEBA_ENRICHMENT_POLICY
-
Enhancement
The UEBA PreConfiguration Plugin now adds two new enrichment sources: UEBA_DestAddrToHostname and UEBA_ProtocolTable.
Installation
Follow these steps to install the UEBA PreConfiguration Plugin v3.3.1:
- Download the UEBA_PreConfiguration_3.3.1.pak file provided in the Download section above.
- Install the plugin by importing the pak file to LogPoint under Settings >> System >> Applications.
Refer to the Configuration section of the UEBA PreConfiguration Plugin Manual to view the details on the configuration.
Documentation
You can get the UEBA PreConfiguration Plugin Manual from the Download section above.
Support
If you have any queries or require assistance, please feel free to contact our support team:
Email: servicedesk@logpoint.com
Phone: +45 7060 6100
Best regards,
Comments
Please sign in to leave a comment.