Director - Architecture & Configuration

Is there a way to get or change the configuration password for a Pool?

Good Day Everyone

When trying to delete a device asset I get hit with this error “ Random hostname (Not the host name of the device I am trying to delete) does not appear to be an IPv4 or IPv6 network “
And it won´t let me delete the device,

I am not sure what to do about this, help would be greatly appreciated.

Hi there

We have Created a ODBC enrichment Source to use a SQL Database for enrichment.
It is all setup on the source side and seems to be working.
But when I then go onto the Director console to add said source in a Enrichment Policy, the source is not there to select, all the other sources are but this one is not.

Has anyone experienced this before?

Hello community,

I am trying to create a connection between two logpoint server. I followed the documentation but I failed to create a connection.

First, I created the open door on the remote logpoint and then tried to create a connection from another logpoint server using distributied logpoint feature after entering ip, password and private ip. I get a notification stating its already exists but I don’t see new connection in a list,to a remote logpoint server under distributed logpoint.

I further notified IT team to open prot 1194/upd but still no success.

IT team can not see any attempts I have made to connect two logpoint servers on their firewall.

I would appreciate assistance if anyone in the community have tried this or knows how do it. I had a session with LogPoint but resulted in unsuccessful attempts.

thank you very much.

Ranjan

Hi,

I’m trying to configure Recorded Future application throug director on fabric enabled LogPoint. I was able to install application through Director on required host but I can’t configure.

On director Recorded Future is not visible under plugins nor as a sub-type of Threat intelligence plugin. On AiO SIEM on which plugin was installed I can see it under configuration but when I try to configure I’m getting error “Invalid action while Fabric Connect is enabled”.

Any ideas?

Hello,

I lost my password GUI  , I can access to logpoint just via CLI ,

How I can reset my GUI password

thanks

Can I centrally control LogPoint Agents from my Director console?

Hi

When you add multiple LogPoint instances to the same pool, do you still have the possibility to modify and create e.g. new devices on the individual instances, or will the configuration be added to all LogPoints in the pool?

Hi

We are deploying Director to our existing environment to get a central control panel. Are there any preconditions I should be aware of?

• Does the Backend servers (I have 3) need to be exact same configuration with repos etc? or can they differ?
• Does the hardware specs need to be the exact same? one server was deployed later and thus has different hardware.

Hi

We are adding Director to our existing environment and I am wondering if I should include both Search Heads, Backend servers, and collectors in the Director pool? And should I devide them into different pools based on their function? e.g.

- pool_1: SH01, SH02
- pool_2: Backend_01, Backend02, Backend_03
- Pool_3: Collector_01

Or simply include all the servers in a single pool?
The collector is sending logs to all 3 backends, and the search heads are able to search in all 3 backends.

Hi

Is it possible to have two or more LogPoint servers with the same name in the same Director pool?

Hi, I’m about to install a new LP Director platform and I was wondering if I should use the minimum memory and CPU sizing recommandations to create VMs or up them a bit. Can you share your experience and recommandations ?

Hello!

I am looking to upgrade the director components to the latest version.

I am aware that i have to follow the upgrade path. But could anyone please suggest me which component i have to upgrade in what order?

Is there a limitation on the number of LP Pools or LPs a Director setup can handle or some kind of benchmark?

I have made some changes in the director console on one of my logpoint machines, and the tasks bar shows completed. However, I am not seeing any changes in the logpoint at all. What can I do about this?