We are pleased to announce that ArcSight SmartConnector Parser Update build 7.6.2.8023 is now available for download from the HPE Marketplace web site and the HPE SSO Download Portal.

 Note about SmartConnector Releases

To support newer device versions and to fix parsing issues more rapidly, as of release v7.3.0, the connector framework and connector parser updates are now delivered as separate releases. The connector parser update builds will be released monthly on ArcSightMarketplace, whilst enhancements to the connector framework (including latest parser updates) are released on a three-monthly cycle and available as usual on the SSO Portal.

 You can download parser releases to your workstation to be applied on standalone connectors, or for ease of upgrade and integration, starting with ArcSight Management Center (ArcMC) version 2.5,  you can use ArcMC to retrieve parser releases directly from ArcSight Marketplace for locally/remotely managed connectors.

 NB: Users of ArcMC pre v2.5 and all versions of ConnApp will need to upgrade to ArcMC v2.5 or later to benefit from the streamlined  Parser Update deployment method described above.

 Each connector parser release is supported and certified with the most recent connector framework release, thus:

• 7.5.1 and 7.5.2 Connector Parser builds will be supported and certified on the 7.5.0 Connector Framework
• 7.6.1 and 7.6.2 Connector Parser builds will be supported and certified on the 7.6.0 Connector Framework

And so on.

 Highlights

Parser Enhancements has been made for the following connectors:

• Blue Coat Proxy SG Syslog 
• Citrix NetScaler Syslog
• Juniper JUNOS Syslog 
• Linux Audit Syslog 
• Pulse Secure Pulse Connect SecureSyslog

 New Device, Component, or OS Version Support 

• Microsoft Office 365;  OneDrive Events
• Microsoft SQL Server Audit Windows Event Log Native; Microsoft SQL Server 2016 Events
• Symantec Endpoint Protection DB; v14.0 Anti-Virus and Anti-Spyware Protection Events
• McAfee ePolicy Orchestrator DB; Orion Audit Log 5.1 with ePO 5.3 Events
• McAfee ePolicy Orchestrator DB; Policy Auditor 6.2 with ePO 5.3 Events

 There are many more parsing issues fixed and enhancements delivered with this release. Please read the SmartConnector Release Notes 7.6.2.8023 or additional information.

The SmartConnector datasheet listing the SmartConnectors can be download here.

Verify that you have a SmartConnector license before installing these connectors. The SmartConnector license entitlement is included within ADP, or else bundled with ESM or Logger if you have not yet migrated to the ADP licensing model.

You can find documentation and release notes on Protect 724 here.

If you have any questions, please contact Customer Support at: https://softwaresupport.hp.com/.

Thank you,

HPE Security ArcSight SmartConnector Product Team