Application Manager

Application records define an application and its ports and protocols so that MPE rules can identify a log origin. For example, if TCP port 53 is mapped to the DNS application, then rules that identify traffic on TCP port 53 can associate it correctly with DNS. Rules can also be set to associate all logs that match a particular application record automatically, regardless of port and protocol.

An association between an application and a port or protocol is global. There can only be one unique pairing for a single LogRhythm deployment.