LOGbinder SP Event Collection from Microsoft SharePoint
The JSA DSM for Microsoft SharePoint can collect LOGbinder SP events.
The following table identifies the specifications for the Microsoft SharePoint DSM when the log source is configured to collect LOGbinder SP events:
Specification |
Value |
---|---|
Manufacturer |
Microsoft |
DSM name |
Microsoft SharePoint |
RPM file name |
DSM-MicrosoftSharePoint-JSA_version-build_number .noarch.rpm |
Supported versions |
LOGbinder SP V4.0 |
Protocol type |
Syslog LEEF |
JSA recorded event types |
All events |
Automatically discovered? |
Yes |
Included identity? |
No |
More information |
http://office.microsoft.com/en-sg/sharepoint/ (http://office.microsoft.com/en-sg/sharepoint/) http://www.logbinder.com/products/logbindersp/ (http://www.logbinder.com/products/logbindersp/) |
The Microsoft SharePoint DSM can collect other types of events. For more information about other Microsoft SharePoint event formats, see the Microsoft SharePoint topic in the Juniper Secure Analytics Configuring DSMs.
To collect LOGbinder events from Microsoft SharePoint, use the following steps:
-
If automatic updates are not enabled, download the most recent version of the following RPMs from the Juniper Downloads:
-
DSMCommon RPM
-
Microsoft SharePoint DSM RPM
-
Configure your LOGbinder SP system to send Microsoft SharePoint event logs to JSA.
If the log source is not automatically created, add a Microsoft SharePoint DSM log source on the JSA Console. The following table describes the parameters that require specific values that are required for LOGbinder event collection:
Table 2: Microsoft SharePoint Log Source Parameters for LOGbinder Event Collection Parameter
Value
Log Source type
Microsoft SharePoint
Protocol Configuration
Syslog