Free IPA

Package Details

The application consist of the following components:

1. Normalization Package
   • LP_FreeIPA

General Description

The Free IPA application normalizes FREE IPA events and enables you to analyze Free IPA data. You can further customize the searches to perform an in-depth analysis.

Installation 

Follow these steps to install the Free IPA v5.0.0 application:

1. Download the Free IPA package from the Download section above.
2. Add the required  Free IPA server as a device in LogPoint.
3. Create a collection policy with the Syslog collector and an appropriate processing policy.  
4. Assign the policy to the device.

Supported Device

The device supported by the Free IPA with LogPoint in this configuration is:

• FreeIPA 3.3

Log Format

Free IPA

Expected Log Format

Key = Value

Log Sample

<135>2020-02-02T09:29:12.452603+01:00 xx-xlp02 lpa-xx-access [02/Feb/2020:09:28:44.022815858 +0100] conn=30436 op=4 RESULT err=0 tag=101 nentries=1 etime=0 notes=P pr_idx=0 pr_cookie=-1 <135>2020-02-02T09:29:12.452555+01:00 xx-xx-lp02 lpaxx-access [02/Feb/2020:09:28:44.012082148 +0100] conn=9 op=126346 RESULT err=0 tag=101 nentries=1 etime=0

To export data to LogPoint, use the Syslog collector on port 514 of the LogPoint server.