Help Document

Account Management

Domains

  1. Adding a Domain
  2. Update a Domain
  3. Reload domain objects
  4. Configuring object level auditing
  5. Configuring audit policies

Domains and Workgroups page lists all the Active Directory domains and workgroups discovered by Log360 Cloud Agent. You have the option to update, reload and delete a domain by clicking on the respective icons.

Adding a Domain

To add a new domain, follow the steps given below.

  • Open Log360 Cloud and select the Settings tab. Then, navigate to Domains and Workgroups under Configuration.
  • devices-groups

  • Choose the Configure Domains tab and click the + Add new domain button. This will open the Add Domain window.
  • devices-groups

  • Choose a Agent and provide a desired Domain Name in the respective fields.
  • devices-groups

  • Enter the desired Domain Controllers in the given field. Use comma ',' separator for entering multiple domain controllers. Alternatively, you may click on Discover to auto-discover the domain controllers.
  • If you select Authentication you will need to provide the credentials (Login Name and Password) with admin privileges. Note that the agent login credentials are used when no authentication credentials are provided.
  • devices-groups

  • Click the Add button.

Update a Domain

To update a domain, follow the steps given below.

  • Open Log360 Cloud and select the Settings tab. Then navigate to Domains and Workgroups under Configuration.
  • devices-groups

  • Choose the Configure Domains tab and click the icon-edit icon corresponding to the desired domain.
  • devices-groups

  • In the window that pops-up, choose a Agent from the drop-down list.
  • update-domain

  • Enter the desired Domain Controllers in the given field. Use comma ',' separator for entering multiple domain controllers. Alternatively, you may click on Discover to auto-discover the domain controllers.
  • To modify the authentication credentials, tick the box corresponding to Authentication and provide a Username and Password in the respective fields. Note that the agent login credentials are used when no authentication credentials are provided.
  • update-domain

  • After making the desired modifications, click the Update button.

Reload domain objects

To reload domain objects in a domain, follow the steps given below.

  • Open Log360 Cloud and select the Settings tab. Then navigate to Domains and Workgroups under Configuration.
  • devices-groups

  • Choose the Configure Domains tab and click the icon corresponding to the desired domain.
  • devices-groups

  • In the window that pops-up, select the required objects and click Reload.
  • reload-domain-objects

Now the domain objects will be reloaded successfully.

Workgroups

  1. Update a Workgroup
  2. Delete a Workgroup
  3. Re-discover workgroup devices

Update a Workgroup

To update a workgroup, follow the steps given below.

  • Open Log360 Cloud and select the Settings tab. Then navigate to Domains and Workgroups under Configuration.
  • update-workgroup

  • Choose the Configure Workgroups tab and click the icon-edit icon corresponding to the desired workgroup.
  • update-workgroup

  • To modify the authentication credentials, select the Authentication checkbox and provide a Username and Password in the respective fields. Note that the agent's login credentials are used when no authentication credentials are provided.
  • update-workgroup

  • Click the Update button.

Delete a Workgroup

To delete a workgroup, follow the steps given below.

  • Open Log360 Cloud and select the Settings tab. Then navigate to Domains and Workgroups under Configuration.
  • update-workgroup

  • Choose the Configure Workgroups tab and click the icon-delete icon corresponding to the desired workgroup.
  • update-workgroup

  • Click Yes to confirm the action.
  • delete-workgroup

The workgroup is deleted successfully.

Re-discover workgroup devices

To re-discover workgroup devices, follow the steps given below.

  • Open Log360 Cloud and select the Settings tab. Then navigate to Domains and Workgroups under Configuration.
  • update-workgroup

  • Choose the Configure Workgroups tab and click the icon-refresh icon corresponding to the desired workgroup.
  • update-workgroup

Discovery of workgroup devices will take place in the background.

Cloud accounts

  1. Add a cloud account
  2. Update a cloud account
  3. Delete a cloud account

Adding a cloud account

To add a new cloud account, follow the steps given below.

  • Open Log360 Cloud and select the Settings tab. Then, navigate to Account Settings under Admin Settings.
  • Adding a cloud account

  • Choose the Configure Cloud Accounts tab and click the + Add Cloud Account button. This will open the Add Cloud Account window.
  • Adding a cloud account

  • Select a Cloud Account Type from the drop-down menu.
  • For AWS accounts:
    • Enter the Display name and Access Key ID.
    • Enter the Secret Access Key value.
    • To add a Cloud Trail account, please follow the configuration instructions.
    • Click Save.
  • For Microsoft 365 accounts:
    • Enter the Tenant Name, Application ID, Application Object ID, and Application Secret.
    • Click Save to add the new Microsoft 365 account for monitoring.

Updating a cloud account

To edit a cloud account, follow the steps given below.

  • Open Log360 Cloud and select the Settings tab. Then, navigate to Account Settings under Admin Settings.
  • Adding a cloud account

  • Choose the Configure Cloud Accounts tab and click the icon corresponding to the desired cloud account.
  • Enter the new credentials for the cloud account such as the Access Key ID and Secret Access Key and click Save.

Deleting a cloud account

  • Open Log360 Cloud and select the Settings tab. Then, navigate to Account Settings under Admin Settings.
  • Adding a cloud account

  • Choose the Configure Cloud Accounts tab and click the delete icon corresponding to the desired cloud account.
  • Select Yes in the dialogue box that prompts you to confirm the action.

Adding a cloud account