Reports for SP


Reports for SP

J

Hi. We've installed LogBinder for SP and we can see it has created the logbinder for SP event log as expected but the GUI doesn't show the Reports option as per the documentation. We would like to use that option to create reports for the customer.
Any clues how we can make it surface?
Tamas Lengyel

JonWM - 10/10/2017
Hi. We've installed LogBinder for SP and we can see it has created the logbinder for SP event log as expected but the GUI doesn't show the Reports option as per the documentation. We would like to use that option to create reports for the customer.
Any clues how we can make it surface?

Sorry, but we have removed reporting capability from all our LOGbinder products at the beginning of this year. Most (if not all) of our customers are using LOGbinder together with their SIEM. SIEMs are designed for reporting and other capabilities. By removing it from LOGbinder, we can focus on what LOGbinder does best, that is extracting audit information from applications (such as SharePoint, Exchange, SQL Server) and forwarding them to an output that can be processed by a SIEM.

Please visit https://www.logbinder.com/Partners/#tabs-SynergyPartners to see a list of SIEMs we have had closer cooperation. LOGbinder is not limited to these SIEMs, it can work with basically any SIEM.

PS: Which documentation refers to reporting? We should have updated all documentation to omit this obsolete feature.

J

Tamas Lengyel - 10/10/2017
JonWM - 10/10/2017
Hi. We've installed LogBinder for SP and we can see it has created the logbinder for SP event log as expected but the GUI doesn't show the Reports option as per the documentation. We would like to use that option to create reports for the customer.
Any clues how we can make it surface?

Sorry, but we have removed reporting capability from all our LOGbinder products at the beginning of this year. Most (if not all) of our customers are using LOGbinder together with their SIEM. SIEMs are designed for reporting and other capabilities. By removing it from LOGbinder, we can focus on what LOGbinder does best, that is extracting audit information from applications (such as SharePoint, Exchange, SQL Server) and forwarding them to an output that can be processed by a SIEM.

Please visit https://www.logbinder.com/Partners/#tabs-SynergyPartners to see a list of SIEMs we have had closer cooperation. LOGbinder is not limited to these SIEMs, it can work with basically any SIEM.

PS: Which documentation refers to reporting? We should have updated all documentation to omit this obsolete feature.

Hi thanks for the answer. Our customer may be disappointed but I can see why LogBinder has made that choice. Essentially we are a large organisation and the SIEM is there for protective monitoring and is not currently geared up to send regular reports and may cost us extra for them to provide. Instead we were hoping to harvest reports using local SharePoint administrators using local data which would be ideal for the customer.
The document suggesting reports are available and can be generated by the product is attached.

  

Edited
3 Years Ago by Tamas Lengyel
bjvista

JonWM - 10/11/2017
Tamas Lengyel - 10/10/2017
JonWM - 10/10/2017
Hi. We've installed LogBinder for SP and we can see it has created the logbinder for SP event log as expected but the GUI doesn't show the Reports option as per the documentation. We would like to use that option to create reports for the customer.
Any clues how we can make it surface?

Sorry, but we have removed reporting capability from all our LOGbinder products at the beginning of this year. Most (if not all) of our customers are using LOGbinder together with their SIEM. SIEMs are designed for reporting and other capabilities. By removing it from LOGbinder, we can focus on what LOGbinder does best, that is extracting audit information from applications (such as SharePoint, Exchange, SQL Server) and forwarding them to an output that can be processed by a SIEM.

Please visit https://www.logbinder.com/Partners/#tabs-SynergyPartners to see a list of SIEMs we have had closer cooperation. LOGbinder is not limited to these SIEMs, it can work with basically any SIEM.

PS: Which documentation refers to reporting? We should have updated all documentation to omit this obsolete feature.

Hi thanks for the answer. Our customer may be disappointed but I can see why LogBinder has made that choice. Essentially we are a large organisation and the SIEM is there for protective monitoring and is not currently geared up to send regular reports and may cost us extra for them to provide. Instead we were hoping to harvest reports using local SharePoint administrators using local data which would be ideal for the customer.
The document suggesting reports are available and can be generated by the product is attached.

  

It's true, this document does have an old screenshot that shows "Reports" in the LOGbinder control panel, but this document's purpose is to outline the events you would use to build reports in the SIEM.  The SIEM's we have partnered with use our "Recommended Alerts and Reports" files (the file you are referring to) to build reporting and alerting in their SIEM's for our LOGbinder products. I would imagine your SIEM has the ability to report and alert.  If so, you can use the document you attached to build the reports. 
J

bjvista - 10/11/2017
JonWM - 10/11/2017
Tamas Lengyel - 10/10/2017
JonWM - 10/10/2017
Hi. We've installed LogBinder for SP and we can see it has created the logbinder for SP event log as expected but the GUI doesn't show the Reports option as per the documentation. We would like to use that option to create reports for the customer.
Any clues how we can make it surface?

Sorry, but we have removed reporting capability from all our LOGbinder products at the beginning of this year. Most (if not all) of our customers are using LOGbinder together with their SIEM. SIEMs are designed for reporting and other capabilities. By removing it from LOGbinder, we can focus on what LOGbinder does best, that is extracting audit information from applications (such as SharePoint, Exchange, SQL Server) and forwarding them to an output that can be processed by a SIEM.

Please visit https://www.logbinder.com/Partners/#tabs-SynergyPartners to see a list of SIEMs we have had closer cooperation. LOGbinder is not limited to these SIEMs, it can work with basically any SIEM.

PS: Which documentation refers to reporting? We should have updated all documentation to omit this obsolete feature.

Hi thanks for the answer. Our customer may be disappointed but I can see why LogBinder has made that choice. Essentially we are a large organisation and the SIEM is there for protective monitoring and is not currently geared up to send regular reports and may cost us extra for them to provide. Instead we were hoping to harvest reports using local SharePoint administrators using local data which would be ideal for the customer.
The document suggesting reports are available and can be generated by the product is attached.

  

It's true, this document does have an old screenshot that shows "Reports" in the LOGbinder control panel, but this document's purpose is to outline the events you would use to build reports in the SIEM.  The SIEM's we have partnered with use our "Recommended Alerts and Reports" files (the file you are referring to) to build reporting and alerting in their SIEM's for our LOGbinder products. I would imagine your SIEM has the ability to report and alert.  If so, you can use the document you attached to build the reports. 

Thanks. One more thing. For ArcSight - do you know whether they have done as you have suggested? I.e. build reporting and alerting into their product as per you recommendations?

bjvista

JonWM - 10/11/2017
bjvista - 10/11/2017
JonWM - 10/11/2017
Tamas Lengyel - 10/10/2017
JonWM - 10/10/2017
Hi. We've installed LogBinder for SP and we can see it has created the logbinder for SP event log as expected but the GUI doesn't show the Reports option as per the documentation. We would like to use that option to create reports for the customer.
Any clues how we can make it surface?

Sorry, but we have removed reporting capability from all our LOGbinder products at the beginning of this year. Most (if not all) of our customers are using LOGbinder together with their SIEM. SIEMs are designed for reporting and other capabilities. By removing it from LOGbinder, we can focus on what LOGbinder does best, that is extracting audit information from applications (such as SharePoint, Exchange, SQL Server) and forwarding them to an output that can be processed by a SIEM.

Please visit https://www.logbinder.com/Partners/#tabs-SynergyPartners to see a list of SIEMs we have had closer cooperation. LOGbinder is not limited to these SIEMs, it can work with basically any SIEM.

PS: Which documentation refers to reporting? We should have updated all documentation to omit this obsolete feature.

Hi thanks for the answer. Our customer may be disappointed but I can see why LogBinder has made that choice. Essentially we are a large organisation and the SIEM is there for protective monitoring and is not currently geared up to send regular reports and may cost us extra for them to provide. Instead we were hoping to harvest reports using local SharePoint administrators using local data which would be ideal for the customer.
The document suggesting reports are available and can be generated by the product is attached.

  

It's true, this document does have an old screenshot that shows "Reports" in the LOGbinder control panel, but this document's purpose is to outline the events you would use to build reports in the SIEM.  The SIEM's we have partnered with use our "Recommended Alerts and Reports" files (the file you are referring to) to build reporting and alerting in their SIEM's for our LOGbinder products. I would imagine your SIEM has the ability to report and alert.  If so, you can use the document you attached to build the reports. 

Thanks. One more thing. For ArcSight - do you know whether they have done as you have suggested? I.e. build reporting and alerting into their product as per you recommendations?

For ArcSight we built the content and had they review and approve it.  LOGbinder for SharePoint, Exchange and SQL Server all have CEF certified outputs.  The pre-built rules, reports and alerts are here:  https://www.logbinder.com/Partners/ArcSight
GO


Similar Topics


Reading This Topic


Login
Existing Account
Email Address:


Password:


Select a Forum....








LOGbinder Forum


Search