License

Overview

To utilize Logpresso Sonar, a license must be installed through the web console. The daily volume of original logs that Logpresso Sonar can collect is defined by the given license, and the features available may also vary according to the license.

When the license validity period expires, certain features will be disabled, but log collection will continue.

License Types

The licenses for Logpresso Sonar are categorized into four types (the identifiers used in the license screen are in parentheses):

  • Logpresso Sonar Light: Standalone Log Management Server (LMS) License (LIGHT)
  • Logpresso Sonar Light HA: Redundant Log Management Server (LMS) License (LIGHT-HA)
  • Logpresso Sonar: SIEM Operation License (SNR)
  • Logpresso Sonar Maestro: Security Operations Automation (SOAR) License (MAE)
Note
STD and ENT offer identical features except for high availability (HA) configuration and DBMS support.

For the features available according to the license, please refer to the appendix License Functional Scope.

Issue License

To install or renew a license, the hardware key information of the control node is required. If the control node is configured in a redundant setup, the hardware keys of both nodes are necessary. Request the issuance of a license from the Logpresso technical support team along with the hardware key information. The hardware key can be found on the License page.

Actions on License Exceedance

A license includes information such as the hardware key, validity period, maintenance period, daily original log collection capacity, and available features. If the daily original log collection capacity granted by the license is exceeded, the following actions will occur:

  • If no license is installed, the maximum daily collection of original logs is 500MB.
  • If the daily collection exceeds the allowable volume, a license exceedance alert will be triggered once per day.
  • If five license exceedance alerts accumulate within the last 30 days, the license will be deactivated, and queries to retrieve stored data will cease.
Actions on License Expiration/Error

If the license expires or an incorrect license is applied, the following message will appear below the menu. Clicking on Replace License will redirect you to the license management page. Please refer to Install License to renew your license.

License expiration notification

In cases of license errors, the license will be indicated with color coding.

License error indication

  • License exceeding the technical support period (Yellow)
  • License exceeding the validity period (Orange)
  • Abnormal license (Red)

License Status

The license status can be viewed under Settings > License.

License overview screen

The information available in License includes:

  • Hardware Key: The hardware key of the control node. It displays a list of all hardware keys specified when the license was created.

    Hardware key list

  • Validity Period: The validity period of the license.

  • End of Support: The expiration date of technical support.

  • Issued: The date the license was issued.

  • Daily Log Quota: The maximum daily collection capacity of original logs. You can configure the logger’s filter settings to avoid collecting unnecessary original logs.

License Quota Usage shows the license usage over the last 30 days. If a cluster is configured with multiple nodes, each node will be displayed with distinct colors.

Over-Quota Alerts display alerts that have occurred in the last 30 days.

Install License

To install a license:

  1. Click Install License under Settings > License.

  2. Enter the license information in the Enter License window and click OK.

    License registration

Uninstall License

To delete a license from server:

  1. Click the delete icon on the license screen.

  2. In the License Deletion dialog, click Delete. Click Cancel if you do not wish to delete.

    Delete license