Configure the Log Correlation Engine Windows Client

If you did not configure the Log Correlation Engine Windows Client during installation, or if you want to modify the configuration, you can configure the client using the command line.

To configure the Log Correlation Engine Windows Client:

1. Via the command line, go to the directory where you installed the Log Correlation Engine Windows Client, then execute the following command: server_assignment --server-ip "<Server IP or Hostname>" --server-port <Server Port>

   • <Server IP or Hostname> corresponds to the IP address or hostname of the Log Correlation Engine server that you want the Log Correlation Engine Windows Client to communicate with. The hostname can be a maximum length of 46 characters.

   • <Port Number> corresponds to the port used to communicate with the Log Correlation Engine server. The default port is 31300.

   Note: The default installation location is C:\Program Files\Tenable\LCEClient.

2. Type net stop "Tenable LCE Client"

   The Log Correlation Engine Client service stops.

3. Type net start "Tenable LCE Client"

   The Log Correlation Engine Client service starts. The Log Correlation Engine Windows Client is configured.

Note: After the client is configured and authorized by the Log Correlation Engine server, a hidden file named .lcufh is created in C:\ProgramData\Tenable\LCE Client. This file contains a cache of process hashes and is used to store hashes that should only be reported once.