Popular Tags

  • External SAML2 Authentication - ArcSight Command Center WebUI

    Hi Team, I'm getting an HTTP 405 error message, and it seems the assertion URL for Entra ID is incorrect after setting up the External SAML2 authentication method. Can someone help me identify the correct assertion URL for External SAML2 authentication…

  • Command Center MITRE coverage

    Hello, how exactly does the MITRE coverage evaluation work. Do I need to fill in some fields with MITRE ID in rule settings ? Thank you

  • ArcSight Command Centre MITRE Coverage Dashboard

    I am trying to align our custom rules to the MITRE Framework and congifured CustomSTring6 & Label to T no. and MITRE ID but the MITRE Coverage Dashboard only show recently attacks in last 2 day not when one of my rules is installed and not enabled or…

  • ArcSight Archives and .supplemental files

    Dears, I have some questions regarding the archives in the ESM. 1- The .supplemental files created after the original file with 4-5 Months , Is this normal behavior ? 2- In case of I moved the original file to the another storage, the .supplemental…

  • ESM Content Sync between ESM-HQ and ESM-DR

    Hi Dears, I want to replicate my ESM Content from HQ to another ESM Disaster Recovery I case of incidents, I could see my resources in ESM D isaster Recovery What is best practice and steps should I follow to achieve that. Regards, Ha…

  • Unable to delete single entries from Active List in Command Center

    ArcSight ESM 7.3 Chrome and Edge I am trying as an Administrator to manually delete single entries in any Active List in Command Center but I keep getting a popup that says " An unexpected error occurred when contacting the server." I try to tail…

  • Nothing be showed in MITRE Attack tab in Command Center

    Dears, When I upgraded ESM to version 7.4,I found that there is nothing displayed in Mitre attack tab in Command Center Note: I access with Admin account Any ideas about that Best Regards, Hany

  • RE: how to resolve and fix the "Manager Unresponsive" pop-up Notification in ArcSight Command Center?

    Hi I recently encountered this problem in version 6.9. Do you have any suggestions for solving the problem? After opening dashboards in command center this error will appear and load average in os goes up to 127, while it has 24 cores... I checked the…

  • ESM archive?

    Hello, I keep enduring the same issue every 6 months. My esm archive fills up and I receive email alerts that my /opt/arcsight/logger/data/archives directory has filled up. However, when viewing the Storage tab in ESM command center, my default storage…

  • Problem in created Dashboard via moving average data monitor in ArcSight Command Center 7.0SP1.

    dear all. in the previouse version of command center 6.* when i loaded a moving average dashboard created via data monitor, both average value and last status value have shown in one dashboard but in the last version of command center 7SP1 we can't see…

  • ESM 6.8 Command Center - Problem retrieving storage space information

    I am trying to view storage allocations and event archives via Command Center on an ESM 6.8 (patch 3) server. Frequently, I cannot view the storage groups or the event archive jobs/listing. The following error is returned: "Problem retrieving storage…

  • Events can be found i Command Center interface, but not in Console?

    Hi I have an issue where events from a flexconnector only can be found using the Command Center, but is not to be found when I use the ESM Console. I created an Active Channel in the ESM Console that looks for evnent from the connector, but all I see…

  • How do we set ESM Command Center timeout to be unlimited?

    How do we set ESM Command Center timeout to be unlimited?

  • No events, when an user logout from the Command Center.

    I want to create some Use-Cases for ArcSight Monitoring. One Use-Case is to monitor every login into ESM and the webinterfaces. If an user is logged in ESM a rule adds the session to a session list. It's working fine. If an user is logged off the ESM…

  • Command Center customizations

    Hi, In an MSSP environment, it is nice to offer to a customer the ability to see his dashboard, without giving him access to the entire arcsight infra. This is doable with ArcSight Web, but not with Command Center. Basically I need to be able to view…

  • Command Center Dashboard Layout not Consistent

    Hi, When I reload a dashboard in Command Center, it rearranges the tiles. Does anyone know if there is a specific reason for this? or if this is some type of bug. Thanks in advance for your help!

  • Difference between ArcSight Web and ArcSight Command Center

    Though ArcSight Command Center we are capable of doing many backend tasks with the manager, what exactly is the difference between both of them! clear me in simple terms please

  • Use Command Center search operators in Arcsight Console

    Hi All, I have used some search operators(e.g.: chart, eval, dedup, where) listed in ESM Guide for searching data in Arcsight Command Center. I have some queries regarding these search operators which is 1. Can I use the search operators in Arcsight Console…

  • Dashboards: Time range picker

    Hi All, I want to incorporate a time range picker into dashboards so that the event data corresponding to the selected time interval is only reflected into the dashboard panels. For example: If I select the time from the dashboard time range picker as…

  • Truncated columns in search result in Command Center

    Hello We discovered that when using Event Search in Command Center (ESM 6.8c patch2), the value for wide String fields (like message, requestContext, dCS... ) is truncated to first ~300 characters in both display and exported CSV search result. We've…

  • Search by Customer Name in ESM Command Center doesn't work

    In my ESM deployment I have multiple customers. They have their own network object, zone objects, etc. But depending on where I search for this it doesn't work. Search criteria: customerName="XYZ" ESM Console Filter - Works ESM Command Center - Active…

  • ArcSight ESM Command Center: Login page slow loadtime

    Hey all, It takes a bit longer than expected to load Command Center login page: https:// <MyURL>:8443/www/ui-phoenix/com.arcsight.phoenix.PhoenixLauncher/#login From a browser on the server where ESM is installed, it loads fast. From any other browser…

  • 3rd party acess to command center (ESM web console)

    Hello, We want to give a customer restricted acess to our command center web console and we don't want to establish a VPN to our management network (where the ESM is). The support told us that the segregation/exportation of the ESM web services to another…

  • Only show "Events --> Event Search" Tab in Command Center

    Hi all, Anyone been able to do this ? We want to restrict what users can see when they login to the Command Center. Specifically in this instance, we only want to give those users access to be able to search the event store. Thanks Mark

  • Command Center language

    Anyone knows how to change Command Center language? I installed Manager 6.8 in English but Console and Command Center were in Russian because my Windows is in Russian. I changed Console language so what is the way to change command center language? I…

Resources

Support
Documentation
Learning Services
Partner Programs
Privacy
Compliance
Help
Company
Privacy Policy
Terms of Use
Cookies Preferences
Accessibility
Anti-Slavery Statement
Support
Contact Us
Careers
Code of Business Conduct and Ethics
The opinions expressed above are the personal opinions of the authors, not of OpenText. By using this site, you accept the Terms of Use. Certain versions of content ("Material") accessible here may contain branding from Hewlett-Packard Company (now HP Inc.), Hewlett Packard Enterprise Company, or Micro Focus. As of January 31, 2023, the Material is now offered by OpenText, a separately owned and operated company. Any reference to the HP, Hewlett Packard Enterprise/HPE, and Micro Focus marks is historical in nature and the HP, Hewlett Packard Enterprise/HPE, and Micro Focus marks are the property of their respective owners.