Documentation Center
AlienVault® USM Appliance™

LOGbinder for SharePoint

When you configure LOGbinder for SharePoint to send log data to USM Appliance, you can use the LOGbinder for SharePoint plugin to translate the raw log data into normalized events for analysis.

Device Details
Vendor LOGbinder for SharePoint
Device Type Application
Connection Type Syslog
Data Source Name logbinder-sp
Data Source ID 1714

Integrating LOGbinder for SharePoint

Before you configure the LOGbinder for SharePoint integration, you must have the IP Address of the USM AnywhereUSM Appliance Sensor.

To configure LOGbinder for SharePoint to send Syslog messages to USM AnywhereUSM Appliance

  1. Select the LOGbinder > LOGbinder Configurator option from the Start Menu.

  2. Select Outputs from the left-side navigation menu and then double-click on “Syslog-Generic”.

  3. Enter the IP address of the USM AnywhereUSM Appliance Sensor and 514 as the port number.
  4. Click OK. Your settings are applied after the service is restarted, and USM AnywhereUSM Appliance will begin receiving logged events from SharePoint.

Plugin Enablement

For plugin enablement information, see Enable Plugins.

Additional Resources and Troubleshooting

https://www.logbinder.com/Products/LOGbinderSP/

For troubleshooting, see the vendor documentation.