General Description
The Rhebo application normalizes Rhebo events. You can further customize the searches to perform in-depth analysis.
Release Details
|
Fields |
Details |
|---|---|
|
Name |
Rhebo |
|
Version |
5.0.1 |
|
Supported On |
LogPoint v6.7.0 and later |
|
Release Date |
2020-05-14 |
| Document Date |
2020-05-14 |
| Download | |
| SHA256 |
936eee9762beed224956d13882c66c5a379b89fdaf7c0337ec2ebb2704a0d25b |
Package Details
The application consist of the following component:
- Compiled Normalizer
- RheboCEFCompiledNormalizer
Enhancement
A minor update has been done in the application’s normalizer for better signature handling.
Installation
Follow these steps to install the Rhebo v5.0.1 application:
- Download the Rhebo package from the Download section above.
- Add Rhebo as the required device in LogPoint.
- Create a collection policy with the Syslog collector and appropriate processing policy.
- Assign the policy to the device.
Supported Device
The supported device of Rhebo with LogPoint in this configuration is:
- Rhebo
Log Format
Expected Log Format
CEF
Log Sample
Jan 13 07:29:19 OD-VM-1-5 CEF: 0|Rhebo|Controller|1.5|alert|MAC/FUNCTION|2|deviceMacAddress=xx:xx:xx:xx:xx:xxcs1=PROFINET_RT_CLASS_2_UNICAST cs2=78d3fb78d0f0baa5 rt=11111111111111111 smac=xx:xx:xx:xx:xx:xx dmac=xx:xx:xx:xx:xx:xx app=PROFINET
To export data to LogPoint, use Syslog collector on port 514 on the LogPoint server.
Release Details
|
Fields |
Details |
|---|---|
|
Name |
Rhebo |
|
Version |
3.3.0 |
|
Supported On |
LogPoint v6.0.0 to v6.6.6 |
|
Release Date |
2020-05-14 |
| Document Date |
2020-05-14 |
| Download | |
| SHA256 |
f2eaa1f5598e09e7c4b6b8afd80797180f116c08dfb670ee8d95682c3f34ae77 |
Package Details
The application consist of the following component:
- Compiled Normalizer
- RheboCEFCompiledNormalizer
Enhancement
A minor update has been done in the application’s normalizer for better signature handling.
Installation
Follow these steps to install the Rhebo v3.3.0 application:
- Download the Rhebo package from the Download section above.
- Add Rhebo as the required device in LogPoint.
- Create a collection policy with the Syslog collector and appropriate processing policy.
- Assign the policy to the device.
Supported Device
The supported device of Rhebo with LogPoint in this configuration is:
- Rhebo
Log Format
Expected Log Format
CEF
Log Sample
Jan 13 07:29:19 OD-VM-1-5 CEF: 0|Rhebo|Controller|1.5|alert|MAC/FUNCTION|2|deviceMacAddress=xx:xx:xx:xx:xx:xxcs1=PROFINET_RT_CLASS_2_UNICAST cs2=78d3fb78d0f0baa5 rt=11111111111111111 smac=xx:xx:xx:xx:xx:xx dmac=xx:xx:xx:xx:xx:xx app=PROFINET
To export data to LogPoint, use Syslog collector on port 514 on the LogPoint server.
Support
If you have any queries or require assistance, please feel free to contact our support team:
Email: servicedesk@logpoint.com
Phone: +45 7060 6100
Best regards,
Comments
Article is closed for comments.