Pre-deployment

Logpoint’s database is not provided to the users as it contains sensitive information.

Hardware Requirements

Logpoint SIEM requires appropriately sized hardware to ensure reliable performance and scalability. The exact specifications depend on your log volume, as higher data ingestion demands more processing power, memory, and storage. To help you plan accurately, you can use our sizing calculator to estimate the daily data volume ingested from your infrastructure into Logpoint SIEM.

The minimum hardware requirements for a standard deployment are:

CPU	Quad-core
Memory	16 GB
Disk	150 GB

Open Firewall Ports

To enable successful communication within your environment, the necessary firewall ports must be opened for the services in use. Fetchers with configurable ports are not included, and depending on your infrastructure, additional ports may be required.

UEBA requires other ports. Go to Enabling UEBA for details.

Port /Protocol	Services
20 & 21	FTP collector and fetcher
22	SSH connection and SCP Fetcher
80 & 443	HTTP connection
123	NTP
161 & 162	SNMP features
389	LDAP enrichment source
514 & 6514	Syslog collector
1193 & 1194	Connection between Logpoint machines
1311	Consolidated features for local and network-based server management
6161 & 6162	Snare collector (SSL)
6343	SFlow collector
6379	Redis
9001	Netflow collector
18000	Webserver
27017	Database
6400, 6900-7099	Logpoint Collector

Installation

• Azure to deploy using the Azure Marketplace image

• AMI (Amazon Machine Images) for deployment in AWS

• Hyper-V VHD to deploy on a Hyper-V host using a VHD file

• Logpoint OVA for VMware environments