MacToVendor Process Plugin

Release Details

General Description

The MacToVendor Process Plugin enriches logs with the NIC vendor name of a MAC address.

Usage Information

General Syntax: | process mactovendor(<mac_address_field>) as <attribute_name>

For example, the "| process mactovendor(mac_addr) as company_name" query enriches the logs with the NIC vendor name in the company_name field associated with the mac_addr field.

 If you do not provide an alias, the application displays the enriched result in the company field by default. 

Installation

Follow these steps to install the MacToVendor Process Plugin v5.0.0:

1. Download the MacToVendor Process Plugin package provided above in the Download section.
2. Install the package by importing the pak file to LogPoint under Settings >> System >> Applications.