
Hello @zana ,
each logpoint system is able to collect logs.
So you can install a normal logpoint in the “distributed logpoint” mode and be able to collect logs with it (this is also called “data node collector”).
In this mode you can enable the SOAR subsystem and work with that, too.
1 comment