Logpoint Agent Collector
Logpoint Agent Collector enables you to collect Windows event logs and flat files. It also provides a file integrity scanner and registry scanner to monitor and report the changes made in files, directories, or registries in a Windows device.
Logpoint Agent Collector is bundled with Logpoint Agent .msi and Logpoint Agent Collector .pak files. When installing LPA for the first time, install the .msi file in Windows and the .pak file in Logpoint.
Package Details
- Collectors
- Logpoint Agent Powered by NxLog
- LPACollectorServiceMonitor
- Normalization Package
- LP_Integrity Scanner
- Window Installer
- Logpoint Agent for Windows
Upgrade Scenarios
- When upgrading LPA from v6.0.1/v6.0.2 to v6.1.1, upgrade the .pak file only.
- When upgrading LPA from v5.2.5/v5.2.6 to v6.1.1, upgrade both .msi and .pak files.
Key Information
You can use Backup and Restore to create backups of configurations of the Logpoint Agent Collector and restore them later. However, if you provide new configurations or generate new certificates after using them, the Logpoint Agent for Windows will still have the old certificates. This can lead to a communication breakdown between the Logpoint Agent for Windows and the Logpoint Agent Collector. To resolve this, download the certificates and manually copy them to the Logpoint Agent for Windows.
Alternatively, follow these communication breakdown recovery steps:
- Ensure the Logpoint for Windows agent is in TCP mode. If in TLS mode, re-install the agent.
- Delete the corresponding Windows device in Logpoint.
- Add a new device for the agent in Logpoint.
Bug Fixes
The following issues are fixed:
| Description | Issue ID | Reference ID |
| Logpoint Agent Collector v5.2.4 and later continued collecting logs despite exceeding its memory limit. As a result, the system's OOM killer terminated the collector to free up memory, halting log collection. | PLUG-11063 | 77886, 79542, 79615, 79950, 80364, 80667, 81074, 81198, 81234, 81860, 81962, 81968 |
| If either Logpoint or Logpoint Agent Collector was upgraded or rebooted when the memory usage of Logpoint was high, the collector failed to collect logs. | PLUG-7934 | 56518, 56842, 72130, 74103, 74826, 76568, 77500, 77886, 78043, 78376, 79436, 79542, 79615, 81327, 81340 |
| Logpoint Agent Collector stopped collecting logs because of a general protection fault. This is an error that occurs in an operating system when a program tries to access a memory that is being consumed by other processes. | PLUG-10404 | 75238, 76744, 76958, 79608 |
| In case of a connection failure between Logpoint and Logpoint Agent Collector, log collection would cease as new connections couldn't be established. | PLUG-10718 | 73087, 77383, 78254, 78633, 79194, 79608, 80250 |
| Due to network congestion and high load on Logpoint Agent, SSL timeouts occurred while delivering certificates from Logpoint to Logpoint Agent. This prevented encrypted communication between the Logpoint Agent and the Logpoint Agent Collector and halted log collection. | PLUG-9677 | 72038, 72435, 72443, 80253 |
| When upgrading the LPA Collector on Logpoint with an Out-Of-Memory (OOM) issue, the UI incorrectly shows that the upgrade was successful, even though it wasn't. | PLUG-11776 | |
| After upgrading the Logpoint Agent (LPA) Collector on a system with an Out-Of-Memory (OOM) issue, the system should have terminated the old processes and released memory, but it didn't. | PLUG-11788 |
Past Releases
Logpoint Agent Collector v6.0.2
Release Date: October 04, 2023
Release Version: v6.0.2
Supported On: Logpoint v7.3.0 and later
Download: Logpoint_Agent_Collector_6.0.2.zip
SHA256:bb53e67147ef00c9990ef48c2060ce1ee57d7df177b21b715de8f7a3e8b56aad
Documentation: Logpoint Agent Collector Guide
Enhancement
|
Description |
Issue ID |
Reference ID |
|---|---|---|
| Logpoint Agent Collector is now compatible with Logpoint v7.3.0. | PLUG-10726 |
Logpoint Agent Collector v6.0.1
Release Date: September 20, 2023
Release Version: v6.0.1
Supported On: Logpoint v7.3.0 and later
Download: Logpoint_Agent_Collector_6.0.1.zip
SHA256: 2add13c9b6aef0acf4dba38e80ca8e2c8ea37891547deb178a858c01d789364e
Documentation: Logpoint Agent Collector Guide
Key Information
You must upgrade to v6.0.1 if you've installed Logpoint Agent Collector v6.0.0.
Enhancement
|
Description |
Issue ID |
Reference ID |
|---|---|---|
| Logpoint Agent Collector is signed to ensure its authenticity during deployment on agents. | PLUG-10648 | - |
Bug Fixes
The following issues have been fixed:
|
Description |
Issue ID |
Reference ID |
|---|---|---|
|
A change in the Logpoint Agent Collector rendered existing configurations invalid and caused service interruptions. |
PLUG-10744 | 75990, 77608, 77667 |
|
5.2.4 and later versions of the Logpoint Agent Collector had a memory leak that caused service interruptions. |
PLUG-9809 | 72949, 72954, 74516, 74618, 74702, 74826, 74852, 74903, 75323, 75329, 75396, 75410, 75673, 75793, 75990, 76140, 76141, 76152, 76246, 76284, 76347, 76365, 76484, 76542, 76553, 76775, 76823, 76844, 76918, 76936, 76939, 77006 |
| The Swedish, Japanese and Arabic characters were not displayed in a proper format in the logs. | PLUG-10639, PLUG-10692, PLUG-8217, PLUG-10695 | 60489, 61609, 73129, 72317, 59793, 50693 |
Logpoint Agent Collector v5.2.6
Release version: 5.2.6
Release Date: April 07, 2023
Supported On: Logpoint v7.1.0 and later
Download: Logpoint_Agent_Collector_5.2.6.zip
SHA256: cc9e8c3fa1c13abbbf2750f80c1481187f4805b79bb6a7f82b45b7c34097dda4
Documentation: Logpoint Agent Collector Guide
Bug Fix
The following issue is fixed:
|
Description |
Issue ID |
Reference ID |
|---|---|---|
|
The Event IDs that were selected to exclude were not excluded when the number of Event IDs exceeded 22. |
PLUG-9897 | 73905 |
Known Issues
View known issues related to Logpoint Agent Collector v5.2.4/v5.2.5/v5.2.6 on the Logpoint Help Center.
Logpoint Agent Collector v5.2.5
Release Date: April 03, 2023
Supported On: Logpoint v7.1.0 and later
Download: Logpoint_Agent_Collector_5.2.5.zip
SHA256: ce39e3c350910913c3781ab835a2b32febe93c57374a8d6f96a65c8408fc7e2a
Documentation: Logpoint Agent Collector Guide
Enhancement
|
Description |
Issue ID |
Reference ID |
|---|---|---|
| Added an additional layer of security to Logpoint Agent to prevent unauthorized access when connecting or pushing configurations. | PLUG-9759 |
Bug Fixes
The following issues are fixed:
|
Description |
Issue ID |
Reference ID |
|---|---|---|
|
An error occurred when attempting to add a Distributed Collector that has a Logpoint Agent configured from the Director Console. |
PLUG-9353 | 69831 ,70675, 70811 |
| XML queries could not be parsed by Windows Event Viewer as it exceeded the supported limit. | PLUG-9802 | 73106 |
|
The periodic failure of Logpoint to send Logpoint Agent SSL certificates to the Distributed Collector, when connected to Director. |
PLUG-7149, COM-16353 | 70811, 46600, 48448, 48691 |
Support
If you have any questions or require assistance, create a support ticket.
Comments
Article is closed for comments.