Popular Tags

  • ArcSight Threat Intelligence Feed/Galaxy SmartConnector

    ArcSight Threat intelligence Feed or GTAP suddenly stops sending logs to the ESM server, even though the connector status shows as running. When I check the logs, only the connector statistics are displayed. I attempted to reinstall it, but I couldn't…

  • Arcsight Logger storage group : question

    Hello everyone, I am new in arcsight logger, I have a question about storage groups. how we can monitor the usage of storage groups in order to estimate the size that we will added to some storage groups for example ? I know that there is a list that…

  • How to performe Arcsigth New deployement sizing

    Dear Community We want to do an Arcsight Assessment /Sizing in order to identify all the requirements for the deployment : Connectors capacity, ESM License, system requirements, EPS, Loggers, Event Brokers... Let you know that we've 4 distributed big…

  • Adding a host to multiple locations in ArcMC

    Hey team, Say I have a container under a host that I want part of a separate location than that node is. I can't add the host again as it says its already added even if I add it under that different location and I cannot move just that container to that…

  • Secure DevOps: What's in it for dev, sec and ops?

    DevSecOps is the next evolution of software delivery. Read up on TechBeacon Learn to get ready. How to include security in DevOps Need to understand the basics of DevSecOps? This TechBeacon Learn track gives you all the answers.

  • Connector table parameters did not pass the verification with error

    Hi, when trying to add a server to an existent Microsoft Windows Event Log – Unified smart connector, I receive the message: Connector table parameters did not pass the verification with error [0:Could not connect to host [192.168.100.123] ]. Do you still…

  • Upgrading Connector appliance to ARcmc

    Hi friends, Question related to upgrading 4 appliance model C3400 and C5500 from connector appliance to ARCmc. Hope you could assist. To migrate from old license to new license. How many GB/day migrate to new license, understanding the old license is…

  • Trend Micro Control Manager DB (Lgacy)

    Trying to recreate "Trend Micro Control Manager DB (Legacy)" connector in our shiny new HPE Security ArcSight Management Center : 2.5.1.1931.0 - however it does not give me the option to enter the server "Database URL" of where the com.microsoft.sqlserver…

  • ArcSight SmartConnector Parser Build 7.6.1.8019 is now available

    We are pleased to announce that ArcSight SmartConnector Parser Update build 7.6.1.8019 is now available for download from the HPE Marketplace web site and the HPE SSO Download Portal. Note about SmartConnector Releases To support newer device versions…

  • Logs sitting on CIFS share that connector wont ingest

    I have a ton of logs I have sitting on my remote file system and have configured my connector appliance to use them but the connector is not ingesting the logs. These logs are from an AIX box that has a share setup on it that I have connected as a REmote…

  • Check Point sslca - No Events.

    Connector Version 7.5.0.7983.0. Our connector was pulling events from our checkpoint manager with no issues. Then it stopped collecting events. The Check Point team and the ArcSight team claim "nothing changed" of course. The Check Point manager definitely…

  • Has anyone added SSDs to an ArcSight AIO Appliance?

    I'm working on a quote for a customer, and after much success with SSDs (FusionIO, etc) in ArcSight implementations I feel I would be failing as a consultant if we didn't offer an option for this. Alternately, I'm having difficulty finding a list of the…

  • Windows Connector

    In order to better support the needs of our customer; we need your feedback and opinions for the questions below. 1. Do you monitor Windows Events? a. Yes b. No 2. Which connector do you use to Monitor Windows Events a. Windows Unified Connector b. Windows…

  • Disabling the Global statistics on ArcMc?

    Disabling the Global statistics on ArcMc? A while back when we were having major performance issues with our "tuned" connector appliances, HP support suggested disabling the Global statistics on the conapp (we don't look at them anyway). This fixed our…

  • Can someone help me in configuring the smart connector?

    I am new to ArcSight and by referring guides we have done the configuration yet. Now looking for some help to clarify confusions. Need to configure the smart connector for Kaspersky DB, but I got stuck at step where we add a JDBC Driver to the Connector…

  • Office 365

    Our O365 just stop processing logs and it gives me the following error: 2017-03-20 15:08:48,410][WARN ][default.com.arcsight.agent.loadable.agent._Office365RestApiConnector][processEvents] The available content info [{"contentCreated":"2017-03-20T20:08…

  • checkpoint integration with C6600

    Hi I am not getting the connector for Checkpoint in C6600 connector appliance. The integration is required through OPSEC as the checkpoint devices are running in older versions like R77.1 which does not support syslog. Is there any method to integrate…

  • Permissions to connectors on the ConnApp

    I have a connector server with all connectors showing connection refused/down. When I SSH into the back end and run the command "service arc_connector# start/stop/restart" I receive an output saying "chmod: changing permissions of ../../user/agent/agent…

  • Can we move the connectors from ArcSight Connector Appliance to ArcSight Management Center

    HI ALL , We are planning to decommission ArcSight Connector Appliance, so Can we move the connectors in the ArcSight Connector Appliance to ArcSight Management Center. Version details, Connectors :: 7.0 , 7.1 and 7.2 ArcSight Connector Appliance :: 6…

  • Need to understand the agent:043 and agent:050

    We have multiple destination. Does agent:050 give the size of raw event after filter and aggregation or is it pre-filter and aggregation. How to find out the total size of all events hitting the connector appliance can we use agent:043?

  • Connnector Access Issue

    I have installed a connector appliance at a remote site with the default password. Now I am trying to access via HTTPS - it denied access with authentication failure. Please help. Hitesh

  • Tripwire IP360 SmartConnector

    Does anyone have any guidance on the IP360 scan file SmartConnector? I was hoping for the simplicity of Tenable vuln scan files, but it seems we aren't that lucky. The connector config asks for 2 file locations and 1 user login for the IP360 application…

  • ArcSight Marketplace

    Hi, I'm in the process of configuring the Connector Host Appliance C6600 with ArcMC. As per the ArcMC Admin Guide, ArcMC requires internet connectivity to Marketplace. Our environment by default does not allow internet traffic. I want to know the IP address…

  • How to forward events from new machine to an aggregator?

    We have stood up a Linux Bomgar appliance and need to forward the events from it to one of our aggregators. The aggregator will then pass the events to the Logger and Connector Appliances. I need specific steps on how to forward the events from Bomgar…

  • HA for Connector Appliance

    Hello All, Happy New Year!! We are having connector appliance running RedHat 7.1. I know that connector appliance doesn't have native HA functionality. In this case, how can we achieve high availability? Can we install any services like Pacemaker to configure…

Resources

Support
Documentation
Learning Services
Partner Programs
Privacy
Compliance
Help
Company
Privacy Policy
Terms of Use
Cookies Preferences
Accessibility
Anti-Slavery Statement
Support
Contact Us
Careers
Code of Business Conduct and Ethics
The opinions expressed above are the personal opinions of the authors, not of OpenText. By using this site, you accept the Terms of Use. Certain versions of content ("Material") accessible here may contain branding from Hewlett-Packard Company (now HP Inc.), Hewlett Packard Enterprise Company, or Micro Focus. As of January 31, 2023, the Material is now offered by OpenText, a separately owned and operated company. Any reference to the HP, Hewlett Packard Enterprise/HPE, and Micro Focus marks is historical in nature and the HP, Hewlett Packard Enterprise/HPE, and Micro Focus marks are the property of their respective owners.