Capture DHCP logs; Same as other Event Logs

[bk]

Hi All,

We now have a requirement to have a record of our DHCP leases within our main audit application, so I've been playing around with the idea of ingesting our lease logs as part of the normal Asset Scan.

I know that Asset Radar would scan for rouge devices, but before I go that route I was wondering if it was possible just to ingest the DHCP logs of our DHCP servers into Lansweeper just like other Event Logs? Or a way to just add the contents of the actual *.log files generated so that we have a record of them in LS.

It doesn't look like there is a way OOTB to do this, but I was wondering if anyone is doing this a non-conventional way or maybe I just overlooked how to do it natively.

Any insight is greatly appreciated 🙂

[DonMario73]

Greetings, this feature will be useful in order to implement the following safeguard related to CIS Control 1 - Inventory and Control of Enterprise Assets

Safeguard 1.4: Use Dynamic Host Configuration Protocol (DHCP) Logging to Update Enterprise Asset Inventory

Use DHCP logging on all DHCP servers or Internet Protocol (IP) address management tools to update the enterprise’s asset inventory. Review and use logs to update the enterprise’s asset inventory weekly, or more frequently.

Regards

[bk]

This is exactly why I asked for this feature, Safeguard 1.4 🙂

[Katgroup · Accepted solution]

As you've discovered, we don't have a mechanism for this, but we can put in a feature request. I can't say how much attention it will get, since some may consider it outside the scope of asset discovery and a large effort to implement.

Even with database wizardy I don't think it would be possible since it would basically need another module added to Lansweeper.