Logpoint Agent (Standalone)
Logpoint Agent (Standalone) is the rebranded version of Logpoint’s NXLog integration. It uses NXLog Enterprise to collect Windows logs and forward them to Logpoint.
Package Details
-
Windows Installer
lpagent_standalone-6.11.10436.msi
Modules
Logpoint Agent (Standalone) supports the following modules:
- Extension modules: xm_admin, xm_soapadmin, xm_charconv, xm_exec, xm_json, xm_perl, xm_syslog, xm_csv, xm_filelist, xm_fileop, xm_kvp, xm_multiline, xm_pattern, xm_rewrite, xm_w3c, xm_xml.
- Input modules: im_batchcompress, im_file, im_fim, im_msvistalog, im_regmon, im_ssl, im_tcp, im_zmq, im_exec, im_internal, im_kernel, im_mark, im_perl, im_udp, im_uds, im_null.
- Output modules: om_batchcompress, om_ssl, om_tcp, om_zmq, om_exec, om_file, om_perl, om_udp, om_udpspoof, om_uds, om_null.
- Processor modules: pm_buffer, pm_pattern, pm_evcorr, pm_norepeat, pm_null.
Supported Platforms
The provided installer supports:
- Windows 2019, Windows 2022, Windows 2025
Enhancement
This release includes NXLog Enterprise version 6.11.10436.
Bug Fixes
Description |
Issue ID |
|---|---|
| On DHCP-configured Windows machines sending logs via UDP, log forwarding could stop after the device’s IP address changed. | EDR-3556 |
| In some cases, the agent could stop sending logs even after system reboot. | EDR-3713 |
Upgrade
Prerequisite
This upgrade is supported only from Logpoint Agent (Standalone) v6.7.9957. Verify that this version is installed before proceeding with the upgrade to v6.11.10436.
Note: Existing configuration files are preserved during the upgrade.
Procedure
For detailed step-by-step instructions, refer to the Logpoint Agent (Standalone) guide.
Past Releases
Logpoint Agent (Standalone) v6.7.9957
Installation and Configuration
For new installation:
-
Install Logpoint Agent (Standalone):
Run the .msi installer of Logpoint Agent (Standalone).
-
Configure Logpoint Agent (Standalone):
Edit C:\Program Files\lpagentstandalone\conf\lpagentstandalone.conf and make the necessary configuration changes.
-
Verify operation:
Save changes and restart the lpagentstandalone service.
Confirm logs are being collected and forwarded as expected.
If you are currently using NXLog v6.7.9957, you must reinstall the agent under the Logpoint Agent (Standalone) name to align with the rebranding:
-
Back up the NXLog configuration file:
Copy C:\Program Files\nxlog\conf\nxlog.conf to a secure location.
-
Uninstall NXLog:
Open Control Panel > Programs > Programs and Features.
Select NXLog and click Uninstall.
-
Install Logpoint Agent (Standalone):
Run the .msi installer of Logpoint Agent (Standalone).
-
Restore the configuration:
Open C:\Program Files\lpagentstandalone\conf\lpagentstandalone.conf.
-
Copy the necessary configuration settings from your nxlog.conf backup into lpagentstandalone.conf. Make sure to define the INSTALLDIR, CONFDIR, and MYLOGFILE macros as follows:
define INSTALLDIR C:\Program Files\lpagentstandalonedefine CONFDIR %INSTALLDIR%\conf\lpagentstandalone.ddefine MYLOGFILE %LOGDIR%\lpagentstandalone.log
For detailed configuration guidance, refer to the Logpoint Agent (Standalone) guide.
-
Verify the configuration:
Save your changes and restart the lpagentstandalone service.
Confirm that logs are being collected and forwarded correctly.
Support
If you have any questions or require assistance, create a support ticket.
Comments
Article is closed for comments.