OpenText ArcSight

Adding a feed database to ArcSight (on the example of AlienVault OTX)

Bohdan Hotsuliak

Hello, I think from the title it is already clear what I need your help with. I'm relatively new to this field and ArcSight, so I'm really hoping you can point me to some text or video resources detailing how to connect a feed base to ArcSight…
- 6 months ago
- OpenText ArcSight
- ArcSight Ideas
Ability to disable a user using swagger API call.

Mohamed Kirkusawi

At the moment there is no option to disable a user using swagger API call. It is possible to update user details but it not possible to set the user enabled login to be false.
- 7 months ago
- OpenText ArcSight
- ArcSight Ideas
Make a YouTube Session on How To Use ESM API

Ali

We need more clarification on How To Use ESM API , as the guide and Volume are nor cleared enough!
- 10 months ago
- OpenText ArcSight
- ArcSight Ideas
Symantec Email Security.Cloud need to get supported

Vikas Rawat

Symantec Email Security.Cloud need to get supported. caseid#02755726 As we have REST API connector to make it supported however we need a cursor reset to do before the first connection with the API Event URL.
- 11 months ago
- OpenText ArcSight
- ArcSight Ideas
Request to have additional information include in ESM API for Rules

cory.thompson@h

We would also like to request that the ESM API shows the status of the Rule. If it is enabled or disabled when using the API call /rules/{id}/getRuleDefinition
- over 1 year ago
- OpenText ArcSight
- ArcSight Ideas
Allow Logger Users&Groups Import and Export

jschwarcz

In reference to Support Ticket Case Number 02620253 , it would be nice to have the possibility to export existing users from the old Logger and import them into the new Logger instance. This would be useful also for Logger User Groups. Workaround with…
- over 1 year ago
- OpenText ArcSight
- ArcSight Ideas
Add Connector support for ForcePoint One (formerly Bitglass)

dw42

We'd like to ingest security events from ForcePoint One (formerly Bitglass), but there is no ArcSight Connector that currently supports it. Bitglass does not support syslog forwarding, but does have an API that third-parties can use to pull logs. According…
- over 1 year ago
- OpenText ArcSight
- ArcSight Ideas
Add the "assume role" in AWS S3 Connector authentication method

Lasse Niklasson

AWS has a possibility to configure the API to assume a role. As far as understand the missing piece in the S3 Connector is that it do not supports “Assume role with profile” or at least not documented how to use it: https://docs.aws.amazon.com/sdk…
- over 1 year ago
- OpenText ArcSight
- ArcSight Ideas
Remove artificial limit on number of entries returned from active list

Hemant Shah

I am trying to use Swagger API to get all entries from an active list ($ESMUrl/detect-api/rest/activelists/LIST_ID/entries), it returns 2000 entries only. Please remove this limitation so it can be more useful.
- over 2 years ago
- OpenText ArcSight
- ArcSight Ideas
Support Cyber Reason Integration with ArcSight ESM

Amit_Bajpai

Hi Support, Kindly develop smart connector to integrate Cyber Reason EDR with ESM as per standard integration. Thanks, Amit Bajpai
- over 2 years ago
- OpenText ArcSight
- ArcSight Ideas
Rest API to retrieve all events in last X hours

Ivgeni Broitman

I would like to have a REST API that will return all events in the last X hours. The closest to what I need is the /events/retrieve but it requires list of events ids. I would like to have the same functionality without the need to know the events ids…
- over 2 years ago
- OpenText ArcSight
- ArcSight Ideas
McAfee UCE

Jananey Selvam

i need to integrate mcafee UCE to arcsight. please help on how i can do this
- over 2 years ago
- OpenText ArcSight
- ArcSight Ideas
Extend parser coverage for googlecloud connector

George Chacko

Happy to see googlecloud connector release with the latest smart connector framework. Will be really useful if the parsing coverage is expanded to accommodate more services especially, VPC Flow Logs, Firewall Rules Logging, and Security command center…
- over 3 years ago
- OpenText ArcSight
- ArcSight Ideas
ProofPoint On-Demand (PoD) Cloud API Development

RichardJohnson

PoD Log API rev C.pdf The configuration guide for PoD is attached for review. Any information / consideration for development would be greatly appreciated.
- over 3 years ago
- OpenText ArcSight
- ArcSight Ideas
Method / verb in WDSL for REST API to update existing filter

poincare.moe

Hello, We need to update massively existing filter, i parse the API REST WDSL to look for a verb able to do this and i can't find any one It will be helpfull for any compagny that want to manage autmaticly hundred filter Thanks Regards
- over 3 years ago
- OpenText ArcSight
- ArcSight Ideas
IBM X-Force Integration with ESM

sssg

Hi Team, Kindly develop a parsers to get the threat feeds for IBM X-Force, threat Intel platform. Regards, Suresh
- over 3 years ago
- OpenText ArcSight
- ArcSight Ideas
Rest API connector with Oauth2

SIEM-Analyste

Hi Team, We would like to set new way to configure Rest API connector (sdkrest) with Oauth2 using CLI. This will resolve issues faced when GUI browsers (firefox, mozilla...) are not allowed on ConnApp for security reasons. As we know when we configure…
- over 4 years ago
- OpenText ArcSight
- ArcSight Ideas
Connector for Microsoft Endpoint Security Antivirus Logs

Rajat Singh

Hello Team, We need connector to integrate logs of Microsoft Endpoint Security AV logs. Please consider this request to build a connector for the same. OR let us know if there are any alternatives available? Thanks Rajat Singh
- over 4 years ago
- OpenText ArcSight
- ArcSight Ideas
Required Connector for a device having REST API and POST request method

Sivannarayana Kundeti

Hello, We need to onboard Dell Bhoomi cloud integration application audit logs. We don't have a smart connector as per my understanding. Dell Bhoomi is using REST API with a "POST" request method to get the logs. I tried to install the "ArcSightRESTCEFConfig…
- over 4 years ago
- OpenText ArcSight
- ArcSight Ideas
Create a Multi URL REST FlexConnector option

kevquinlan

For Vendor API's that have different URL's depending on the module or type of events in scope - i.e. HTTPS://<vendor_URI>/events HTTPS://<vendor_URI>/audit_log HTTPS://<vendor_URI>/alerts create a REST API FlexConnector that can be used to collect from…
- over 4 years ago
- OpenText ArcSight
- ArcSight Ideas
Support to deploy rule content and enable/disable/sync rules by ESM APIs

Leon Chiu

Hi ArcSight PMs The idea is to let ESM APIs able to deploy rule content and enable/disable rules in ESM. And also leverage APIs to synchronized rules in different ESM instances, to result in ESM HA function. Regards Leon Chiu
- over 4 years ago
- OpenText ArcSight
- ArcSight Ideas
McAfee MVISION

Sol Huebner

McAfee is offering a SaaS solution for its ePO product. https://www.mcafee.com/enterprise/en-ca/products/mvision-epo.html It features an API https://docs.mcafee.com/bundle/mvision-epolicy-orchestrator-product-guide/page/GUID-26C1A6F2-DEB6-48B6-80D6-509649C356BC…
- over 4 years ago
- OpenText ArcSight
- ArcSight Ideas
mimecast integration with ArcSight

Mridul Joshi

team, Can you build support and ready parser for Mimecast products, currently many clients and companies are using Mimecast cloud products and currently no support available from ArcSight for Mimecast devices integration.
- over 4 years ago
- OpenText ArcSight
- ArcSight Ideas
how to collect logs from cloud applications

adarsha

There are so many cloud applications that arcsight is not supported. To collect logs from those what are the steps to be followed and in what way we can collect logs to the smartconnector if tool support API how do we collect logs via API? can we convert…
- over 4 years ago
- OpenText ArcSight
- ArcSight Ideas
Provide Authentication and Authorization to the Load Balancer REST API

Keith Stover

The REST API interface to the introduced in the Load Balancer Connector, v1.4.x release provides the means to update the configuration on the fly via the API. That being said, there isn't currently any authentication and authorization to that REST API…
- over 4 years ago
- OpenText ArcSight
- ArcSight Ideas

Resources

Learning Services

Partner Programs

Privacy

Compliance

Help

Company

Privacy Policy
Terms of Use
Cookies Preferences

Accessibility
Anti-Slavery Statement

Support
Contact Us

Careers
Code of Business Conduct and Ethics

The opinions expressed above are the personal opinions of the authors, not of OpenText. By using this site, you accept the Terms of Use. Certain versions of content ("Material") accessible here may contain branding from Hewlett-Packard Company (now HP Inc.), Hewlett Packard Enterprise Company, or Micro Focus. As of January 31, 2023, the Material is now offered by OpenText, a separately owned and operated company. Any reference to the HP, Hewlett Packard Enterprise/HPE, and Micro Focus marks is historical in nature and the HP, Hewlett Packard Enterprise/HPE, and Micro Focus marks are the property of their respective owners.