Adding a Normalization Policy¶

Logpoint SIEM needs to normalize your logs before UEBA can use them. For that reason, you need to add compiled normalizers and normalization packages specific to UEBA.

If you need more information about SIEM normalization, go to Adding a Normalization Policy.

1. Go to Settings >> Configuration >> Normalization Policies.

2. Click Add.

Adding a Normalization Policy¶

3. Enter a Policy Name.

4. Select the required normalization packages and compiled normalizers only. Logpoint provides the following normalization packages and compiled normalizers to normalize the Active Directory, web proxy, email, VPN, authentication, and resource access logs.

5. Click Submit.