Hello Isf 

In what sense are you integrating Symantec data encryption?

Are you referring to collecting events from whatever means "Symantec data encryption" ? or something else?

Best Regards,

Daniel

Hi Ionut Daniel Mosoiu,

Yes I am talking about the collection of logs from symantec data encryption to arcsight.

Regards

Hello Isf, 

take a look on this page "https://www.microfocus.com/documentation/arcsight/arcsight-smartconnectors-24.3/arcsight-smartconnectors-for-other-event-sources/" where you can find a section related to Symantec with multiple products as :

Symantec AntiVirus Corporate Edition File/Multiple File1

Symantec Data Center Security DB

Symantec Endpoint Protection DB

Symantec Endpoint Protection Syslog

Symantec Messaging Gateway Syslog1

Hopefully, one of them will cover what you are looking for.

Best Regards 

Daniel

Hi Daniel,

I already looked at this before posting.
Indeed I want to collect symantec data encryption events and as you can see it is not in the list.
I was wondering if anyone has done this before.

Regards

Hello Isf, 

i am unfamiliar with "Symantec data encryption" considering that they have so many solutions. 

Can you be more specific, maybe with a link, about the end product to be easy to identify if we have an out-of-the-box connector for the solution? 

Best Regards, 

Daniel

Hi Daniel,

Apparently this is not supported. So I have to develop a flexconnector for that.

Regards

Hi Daniel,

Apparently this is not supported. So I have to develop a flexconnector for that.

Regards

Hello Isf, 

thank you for your update on this matter. 

Sure developing a flex connector is a solution when for the source there is no out-of-the-box connector or parser ( in case that source is a syslog format).

Also please can you open an idea into the idea exchange portal  "https://community.microfocus.com/cyberres/arcsight/i/ideas" to be notified by the Product Manager with the full name of the product that we are not supported yet.

Best Regards, 

Daniel