Users can access and use Logpoint. Every user is a part of a user group. You can create users, assign them to user groups, activate/deactivate them and change their passwords.
Users are granted Logpoint and SOAR permissions specific to the user group they are assigned to.
Log-in credentials for a default user in Logpoint are:
Username: admin Password: changeme
Users¶
You have to create a user group before adding a user. Refer to User Groups section for details.
Go to Settings >> User Accounts from the navigation bar and click Users.
At the top left, click Add.
Enter a Username.
Enter a Password and re-enter it.
Select a User Group. You can associate a user with multiple user groups.
Enter the Name, Email and Time Zone of the user.
Note
The default time zone is the UTC.
Users can view collected logs according to their time zone. If a user works in Denmark and wants to view the logs collected in England, the user can view those logs in the Danish time zone.
Click Submit.
Adding a User¶
You can edit user related information like Username, User Group, Email and Time Zone.
Go to Settings >> User Accounts from the navigation bar and click Users.
Click the relevant Username to edit the user.
Editing a user¶
Update the information.
Note
You canot edit the Username of a user.
Click Submit.
Go to Settings >> User Accounts from the navigation bar and click Users.
Click the Change Password icon from Actions.
Enter the New Password and re-enter it.
Click Submit.
A deactivated user remains in the system (as opposed to deleted) but cannot access the system.
Go to Settings >> User Accounts from the navigation bar and click Users.
Click the De-Activate User icon from Actions.
To deactivate multiple users, select the users, click the More drop-down and click Deactivate Selected.
To deactivate all the users, click the More drop-down and click Deactivate all.
Click Yes.
Enter your credentials and click Ok.
You must deactivate a user before deleting them.
Go to Settings >> User Accounts from the navigation bar and click Users.
Click Manage De-Activated Users.
Note
When deleting the owner of a shared dashboard, alert rule, report template or search template, you need to do one of two things. Delete the shared entity or transfer its ownership to another user. After you delete a user, you can use Transfer Ownership for each entity they own. For more information, go to the following pages:
Click the Delete icon from Actions.
Deleting a User¶
To delete multiple users, select the users, click the More drop-down and select Delete Selected.
To delete all the users, click the More drop-down and select Delete All.
Note
Click the Activate icon from Actions to activate a user.
Click yes to confirm.
Plugin Users use plugins to authenticate and use Logpoint. There are two authentication types in Logpoint:
Logpoint
LDAP (uses LDAP Authentication plugin)
You can also use the following authentication plugins:
Radius Authentication Plugin
ADFS Authentication Plugin
SAML Authentication
OAuth Authentication
You can view which authentication types are used and who uses them. Go to Settings >> User Accounts from the navigation bar and click Users. Click Plugin Users to filter users according to authentication type.
A deactivated user cannot access the system.
Go to Settings >> User Accounts from the navigation bar and click Users.
Click the Plugin Users drop-down and select the user’s authentication plugin.
Click the De-Activate User icon from Actions.
Click Yes.
Enter your credentials and click Ok.
You must deactivate a user before deleting them.
Go to Settings >> User Accounts from the navigation bar and click Users.
Click the Plugin Users drop-down and select the user’s authentication plugin.
Click Manage De-Activated Users.
Click the Delete icon from Actions.
To delete multiple plugin users, select the users, click the More drop-down and select Delete Selected.
To delete all the users of a plugin, click the More drop-down and select Delete All.
Note
Click the Activate icon from Actions to activate a user.
Click Yes to confirm.