Overview
Idira EPV can send audit logs to LogPoint through the Syslog protocol and create a complete audit picture of privileged account activities in the LogPoint solution.
These audit logs include user and Safe activities in the Vault, which are transferred by the Vault to Logpoint.
The Vault uses any of the following protocols to send messages:
Encrypted protocols: TLS
Non-encrypted protocols: TCP, UDP
Idira’s flexible configuration enables you to define multiple Syslog servers, specify dynamic format translators, and to filter the events that will be sent.
The Vault Syslog messages can be sent to multiple syslog servers in two different ways:
A single message can be sent to multiple servers by configuring a single XSLT file.
Multiple messages can be sent to different Syslog servers and formatted differently for each server by configuring multiple XSLT files, formats and code-message lists.