Ingest Logs

Prerequisites

• Logpoint: v7.5.0 or later

• Windows Platform: 64-bit Windows Server 2008/Vista or later

• Network Access: Required ports open between Windows endpoints and Logpoint server

• Administrative Privileges: Required for agent installation and configuration

Required Ports

Port	Location	Protocol	Function
7994	Windows	TCP	Cleartext management communication between Logpoint and Windows
7995	Windows	TLS	Encrypted management communication between Logpoint and Windows
7996	Logpoint	TCP	Batch log file transmission from Windows to Logpoint
7997	Logpoint	TLS	Encrypted batch log file transmission from Windows to Logpoint
7998	Logpoint	TCP	Real-time log transmission from Windows to Logpoint
7999	Logpoint	TLS	Encrypted real-time log transmission from Windows to Logpoint

Install Logpoint Agent (Centralized)

Logpoint Agent (Centralized) consists of two components that must be installed separately:

1. Logpoint Agent for Windows (.msi) - Installed on Windows endpoints

2. Logpoint Agent (Centralized) (.pak) - Installed in Logpoint SIEM

Installing Logpoint Agent on Windows Endpoints

1. Download the Logpoint Agent for Windows .msi installer.

2. Browse to the downloaded .msi file.

3. Right-click the .msi file and select Install.

4. Follow the installation wizard prompts.

After installation, the agent creates a folder at C:\Program Files (x86)\lpagent.

Installing Logpoint Agent (Centralized) in Logpoint SIEM

1. Download the .pak file from the Logpoint Release Notes.

2. Install the Package

   1. Go to Settings >> System Settings from the navigation bar.

   2. Click Applications.

   3. Click Import.

   4. Browse to the downloaded .pak file.

   5. Click Upload.

3. Verify Installation After installation, verify the integration appears under Settings >> System Settings >> Plugins.

Important: When upgrading Logpoint Agent (Centralized), remove existing certificates and generate new ones after installation to ensure proper encrypted communication.