# Search and Configure Overview

In Director Console, you can:

* Configure entities, built-in collectors/fetchers, operations, plugins, system settings, and manage users on the Fabric-enabled LogPoint instances from the **Configure** page.
* Search the configured entities, and modify or delete them from the **Search** page.
* View the Director setup components graphically, configure new entities in a Fabric-enabled LogPoint, and view its existing configurations from the **Config View** page.
* Install and uninstall assets from the **Assets** page.
* Configure different authentication from the **Authentication** page.
* Synchronize the Director Console database from the **Resync Database** page.
* View tasks summary from the **Tasks** page.

### Search

You can search for the entities available in the Fabric-enabled LogPoint instances from the **Search** page. You can now modify identical entities of same entity type in multiple LogPoint instances from the search result. You can only modify the entities that are version compatible with each other.

{% hint style="info" %}
You can modify all the entities except enrichment sources.
{% endhint %}

<div align="left"><figure><img src="https://3198401301-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FhzE0kPDYI002AO7fHbFv%2Fuploads%2FArEkp7IX45e8YclqPqJR%2Fimage.png?alt=media&#x26;token=6b24e9fb-9a12-43eb-a613-07ac3b3d836e" alt="Search Page" width="375"><figcaption><p>Search Page</p></figcaption></figure></div>

You can also use the **Advanced Search** option to search for the entities in the Fabric-enabled LogPoint instances based on two criteria:

1. **Machine Criteria** to search for a LogPoint.
2. **Configuration Criteria** to search for the entities created in a LogPoint.

You can use each criteria separately or use them together to enhance the search results.

<div align="left"><figure><img src="https://3198401301-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FhzE0kPDYI002AO7fHbFv%2Fuploads%2FbNgerEABWtOQfF86kf9a%2Fimage.png?alt=media&#x26;token=7d786576-201f-404b-a8b5-cc2c2b9658f9" alt="" width="375"><figcaption><p>Advanced Search Page</p></figcaption></figure></div>

You can also use the Advanced Search in the **Configure** page. However, in the **Configure** page, the Advanced Search lets you use the Machine Criteria only to carry out your searches.

### Configure

#### Configure Entities, Collectors/Fetchers, Settings, and Manage Logpoint Users

You can configure entities, built-in collectors/fetchers, operations, plugins, system settings, shell, UEBA and manage users on the Fabric-enabled LogPoint instances from the **Configure** page.

<div align="left"><figure><img src="https://3198401301-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FhzE0kPDYI002AO7fHbFv%2Fuploads%2FflylhUphxJBnbJUU1efX%2Fimage.png?alt=media&#x26;token=4011865a-e4d8-4638-8e91-71940244d207" alt="Configure Page" width="375"><figcaption><p>Configure Page</p></figcaption></figure></div>

**Configurable Entities and Collectors/Fetchers:**

| **Entities**            | **Collectors/Fetchers** |
| ----------------------- | ----------------------- |
| Device Groups           | File System Collectors  |
| Devices                 | FTP Collectors          |
| Enrichment Policies     | FTP Fetchers            |
| Label Packages          | SCP Fetchers            |
| Lists                   | SFLow Collectors        |
| Log Collection Policies | Snare Collectors        |
| Macros                  | SNMP Fetchers           |
| Normalization Packages  | SNMP Trap Collectors    |
| Normalization Policies  | Syslog Collectors       |
| Parsers                 | WMI Fetchers            |
| Processing Policies     | –                       |
| Raw Syslog forwarders   | –                       |
| Remote Targets          | –                       |
| Repos                   | –                       |
| Routing Policies        | –                       |
| SNMP Policies           | –                       |

**Configurable Plugins, System Settings, and Operations:**

| **Plugins**            | **System Settings**           | **Operations**          |
| ---------------------- | ----------------------------- | ----------------------- |
| Threat Intelligence    | General Settings              | Blocked and Ignored IPs |
| Cisco AMP              | SMTP Settings                 | Configure Backup        |
| Stix/Taxii             | NTP Settings                  | Create LDAP Strategy    |
| Microsoft Defender ATP | SNMP Settings                 | Create Snapshot         |
| CiscoUmbrella          | HTTPS Settings                | Manage LDAP Strategy    |
| CSVEnrichmentSource    | Lockout Policy Settings       | Manage Snapshot         |
| –                      | SSH Settings                  | Refresh List APIs       |
| –                      | Support Connection Settings   | Manage Backup           |
| –                      | Modes of Operation Settings   | –                       |
| –                      | Enrichment Settings           | –                       |
| –                      | Open Door Settings            | –                       |
| –                      | Distributed LogPoint Settings | –                       |

You can also select an action from **Frequent Actions** or **Suggested Actions**:

1. **Frequent Actions** lists the top four actions that you perform frequently. These four actions are the four most frequent tasks you have performed from the list of 100 most recent entities or built-in collectors/fetchers tasks.
2. **Suggested Actions** lists the actions that you might find useful. They are based on the last five unique entities or built-in collectors/fetchers tasks that you have carried out.

**Operations**

You can configure Blocked and Ignored IPs, configure Backup, create LDAP Strategy, create Snapshot, manage LDAP Strategy, manage Snapshot, Refresh List APIs, manage Backup, and view machine details of a Fabric-enabled LogPoint from the **Operations** page.

<div align="left"><figure><img src="https://3198401301-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FhzE0kPDYI002AO7fHbFv%2Fuploads%2Fb1SThiY4wlhfFZBIYMQs%2Fimage.png?alt=media&#x26;token=da6b0c88-fb94-48de-a8d5-45985e03fa74" alt="" width="375"><figcaption><p>Operations Page</p></figcaption></figure></div>

**Select Configuration Location Table Details:**

| **Header**    | **Description**                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                           |
| ------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
| Pool          | Provides the pool name of the machine.                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    |
| Machine       | Provides the name of the machine.                                                                                                                                                                                                                                                                                                                                                                                                                                                                                         |
| Version       | Provides the version of LogPoint.                                                                                                                                                                                                                                                                                                                                                                                                                                                                                         |
| Machine Type  | <p>Lets you identify whether the machine is a collector or a distributed LogPoint.</p><ul><li>In a <strong>Collector</strong> LogPoint, you can view the <strong>Machine Info,</strong> create <strong>Snapshots</strong> and <strong>refresh list</strong> for the <strong>Support Connection Settings</strong> API only.</li><li>In a <strong>DLP,</strong> you can perform all the operations available.</li></ul>                                                                                                     |
| Director Mode | <p>Lets you identify whether the users of the Fabric-enabled LogPoint instances can have complete control over their system despite being connected to the Director setup.</p><ul><li>In <strong>Co-Managed</strong> mode, the users cannot perform any configure and search actions for that particular machine from the Director Console.</li><li>In <strong>Fabric Only</strong> mode, the users have access to all the configure and search features for that particular machine from the Director Console.</li></ul> |
| Action        | <p>You can view the <strong>Machine Info</strong> of a LogPoint by clicking the <strong>Info</strong> icon. The <strong>Machine Info</strong> lists the following details of the machine:</p><ul><li>Pool Identifier</li><li>Pool Name</li><li>Machine Identifier</li><li>Machine Name</li><li>IP Address</li><li>Version</li><li>Collector</li><li>Co-Managed</li></ul>                                                                                                                                                  |

### View Config View and Add a New Source

The Config View page allows you to:

* View the Director setup components graphically.
* Configure new entities in a Fabric-enabled LogPoint and view its existing configurations.
* Configure the entities required to add a new source in a single flow.
* Retry a failed operation without the need to re-enter the form data in the [Add New Source](https://docs.logpoint.com/director/director-console/config-view#add-a-new-source) panel.
* View LogPoint details such as version, machine identifier, director mode, machine type, and IP address by clicking on the LogPoint node on the graph.
* View pool details such as name, UUID, and LogPoint instances connected to it by clicking on the pool node on the graph.
* Group LogPoints based on their versions by right-clicking on the pool node and selecting **Show in groups**.<br>

  <div align="left"><figure><img src="https://3198401301-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FhzE0kPDYI002AO7fHbFv%2Fuploads%2FaIdSvrCkoD1HSKAGz5L7%2Fimage.png?alt=media&#x26;token=ed3a4190-306e-42ab-a6fa-b70c57ad26fb" alt="" width="375"><figcaption><p>Config View Page</p></figcaption></figure></div>

The **Config View** page also has the following features:

* **Auto Layout** to spread the graph into a clean layout.
* **Fit to Screen** to fit the graph on the screen.
* **Filter** to filter the graph based on pools and LogPoint instances.
* **Reset** to set the graph to the original state.

### Configure Assets

Assets are the IPLookups, Label Packages, Lists, Macros, Normalization Packages, Patches, and Plugins that you can install on a Fabric-enabled LogPoint. You can install an asset on multiple LogPoint instances of different pools from the **Assets** page. You can also uninstall assets from multiple LogPoint instances of different pools at once.

### Configure Authentication

You can log into the Director Console using any of the following authentication mechanisms:

1. Director Console Authentication
2. LDAP Authentication
3. AD FS Authentication

### Resync Database

The resync database setting allows you to synchronize the Fabric-enabled LogPoint information in Director Console in case of missing LogPoint information.

### View Tasks Summary

The **Tasks** page shows you can view and filter the list of tasks performed in the Director Console.

**Admin** users can view all users’ tasks. Regular **users** can only view their own tasks.<br>

<div align="left"><figure><img src="https://3198401301-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FhzE0kPDYI002AO7fHbFv%2Fuploads%2FBZtxefsUVibOBSvp274V%2Fimage.png?alt=media&#x26;token=2547124f-e406-4c62-97d3-4da832508944" alt="" width="563"><figcaption><p>Tasks Page of Regular Users</p></figcaption></figure></div>

**Status** of a task can either be **In Progress**, **Failed**, or **Completed**. Click the corresponding task to see its details.

**Admin** users can select **Show All** to view all the tasks.<br>

<div align="left"><figure><img src="https://3198401301-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FhzE0kPDYI002AO7fHbFv%2Fuploads%2Ftpf8b9B6QyZ3BcJruB9k%2Fimage.png?alt=media&#x26;token=151c299b-35e9-42bf-9698-450686f9b6cb" alt="" width="563"><figcaption><p>Task Details</p></figcaption></figure></div>

You can view the number of tasks summary in the [Dashboard Widgets](https://docs.logpoint.com/director/monitor-entities/monitor-system-via-centralized-dashboard/monitor-pool#monitoring-the-visualization-of-parameters) section.

You can also retry configuring entities and built-in collectors/fetchers from the **Tasks** page. To retry a failed task, click **Retry** from the **Actions** column.

{% hint style="info" %}

* You have to retry the failed tasks within four hours.
* You cannot retry importing devices.
* If you select multiple LogPoint instances for a task, you can retry the task only if it fails in all selected instances. If the task succeeds in any LogPoint, you have to retry the task in the rest of the LogPoint instances individually. For example, you configure a device in three LogPoint instances: LP1, LP2, and LP3, where the task fails in LP2 and LP3 only. Here, you have to retry the task for LP2 and LP3 individually.\
  Tasks failed for some Logpoint instances:\
  ![](https://3198401301-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FhzE0kPDYI002AO7fHbFv%2Fuploads%2Ft6q8iCzdREBWFsCMAA4H%2Fimage.png?alt=media\&token=4e55edd8-e948-432f-8f2f-996e045d11a3)\
  Tasks Failed due to a subtask:\
  ![](https://3198401301-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FhzE0kPDYI002AO7fHbFv%2Fuploads%2FZADgvhJ3b1zdBrrnOziB%2Fimage.png?alt=media\&token=c3d2a739-0036-4a48-9064-efc580919729)
* If you change a failed task’s parameters before retrying, the old parameters are applied when you retry the task. For example, if you fail to configure a device Device-A which belongs to the device group DeviceGroup-A. If you change or delete DeviceGroup-A before retrying, it is still selected when you retry configuring the device. Here, you have to select the required device group and proceed with the task.
  {% endhint %}
