OpenText ArcSight Community

Add Destination Cleanup

Jan Slama

I have noticed, that after couple of adding and deleting destinations in ArcMc, the config files for those destinations are still present on the connector. Theese connectors also logs errors similar to this: [ERROR][com.arcsight.agent.loadable._DOSProtector…
- 1 month ago
- OpenText ArcSight
- ArcSight Ideas
request for support AES256 with SHA2 for Logger appliance

Wai mun Lee

ArcSight Logger and ArcSight Connector's SNMPv3 for polling and traps only support up to AES128. Purpose : To increase the security level Meeting compliance and hardening standard
- 5 months ago
- OpenText ArcSight
- ArcSight Ideas
Can not create new rule in ArcMC with metric type Reciver EPS

jschwarcz

Hello Team, Our customers is unable to create a new rule in ArcMC with metric type Receiver EPS or Forwarder EPS used. When the new rule is being created, once you choose Metric Type: Receiver EPS or Forwarder EPS an error shows saying: "Cannot get product…
- 7 months ago
- OpenText ArcSight
- ArcSight Ideas
ArcMC to support Multi Factor Authentication

Vikashk1

We as a bank are looking for setting up Multi Factor Authentication in ArcMC. We could not find any reference document to set up MFA in our current implementation. As per support, MFA is not supported in the current version of ArcMC. Since ArcMC gives…
- 11 months ago
- OpenText ArcSight
- ArcSight Ideas
Add report on devices reporting to ArcMc as an actual report or export

Brian Wolff

ArcMc shows the devices that are reporting, in the summary dashboard. The Topology and Deployment Views also show Source, Processor, Destination In preparation for a data center relocation, we need to identify all Log Originating devices that are…
- over 1 year ago
- OpenText ArcSight
- ArcSight Ideas
A new ArcSight architecture for SMB Companies

Vladimir Boianji

Please consider building an ArcSight architecture for SMBs - ESM4SMB Unified architecture based on ESM with up to 25000 EPS (ESM4SMB), including 1. Based on ESM platform make licensing difference for correlation (ex ESM) and logging (ex logger) (A key…
- over 1 year ago
- OpenText ArcSight
- ArcSight Ideas
ArcMc Deployment and Topology Views Add Zoom Slider

MajorW

The slider - ------------ + is already used in SOAR rule authoring Would allow easier viewing and less scrolling
- over 1 year ago
- OpenText ArcSight
- ArcSight Ideas
Adopt a Heat Map approach to the Monitoring Summary Page

MajorW

As the number of devices being monitored grows, the amount of scrolling thru the UI also grows. This view quickly brings the viewer to focus on light vs. Heavy or in distress. Proposed Current
- over 1 year ago
- OpenText ArcSight
- ArcSight Ideas
Enhancement to ArcMC on Connector Appliance to support HA and Device monitoring through Load Balancer

leeshin

For ArcMC on Connector Host Appliance (CHA), the appliance plays dual purposes of both a Device/Connector monitoring (ArcMC). and Connector hosts (with on-board connectors). However, there's no HA capability for ArcMC or Connector Host Appliances…
- over 1 year ago
- OpenText ArcSight
- ArcSight Ideas
Enhancement request for ArcMC and Connector Host Appliance (CHA) to support higher number of on-board Containers/Connectors

leeshin

Enhancement request for ArcMC and Connector Host Appliance (CHA) to support higher number of on-board Containers/Connectors with the following: i) Pre-installed and pre-configured with at least twice the number of on-board Containers/Connectors. Existing…
- over 1 year ago
- OpenText ArcSight
- ArcSight Ideas
ArcMC full IPv6 support for ArcMC WEB-GUI

mblotzki

ArcMC full IPv6 support for ArcMC WEB-GUI needed for SW ArcMC 3.x When SW ArcMC is installed on mixed IPv4/IPv6 environment, the ArcMC WEB-GUI can not open all URL's https://[1:2:3:4...]:9000 I can not open the following links in ArcMC with IPV6…
- over 1 year ago
- OpenText ArcSight
- ArcSight Ideas
To get the report of connector downtime/uptime report from ArcMc

Paladion Soc

Hi Team, We are facing issue to know the correct downtime or uptime record of any installed connector which is reporting and manage by ArcMc. Request you to add the feature in ArcMc to get the report for all the connector downtime/uptime from ArcMc…
- over 1 year ago
- OpenText ArcSight
- ArcSight Ideas
Possibility to manually force the connector to specify which parser to use for which source

Stanislav Snegirev

For say there is a Juniper device with IP address xxx.xxx.xxx.xxx and I want the connector to use a specific parser, let’s say “Parser XYZ” when it receives events from it and the same for other sources which send logs to it thus select a concrete device…
- over 2 years ago
- OpenText ArcSight
- ArcSight Ideas
ArcMC (and sucessor) enhancement

vitz1

HI, would be great if we could have both of the below options in ArcMC or its sucessor: - 1) copy destination settings (like CustomerName, aggregation, filtering etc) from one connector-destination to another connector and also to the same connector…
- over 2 years ago
- OpenText ArcSight
- ArcSight Ideas
PostgreSQL DB Integration With ArcSight Through Flex Connector

Deeps Arcsight

Hi All, We are trying to integrate some application logs which are currently storing data in PostgreSQL DB. While integrating, facing lot of technical issues (errors). If anyone has done this before, please help. What are the JDBC drivers to be…
- over 2 years ago
- OpenText ArcSight
- ArcSight Ideas
Support QUICK protocol for log collection / forwarding

lincoln.thum@e-

There are more and more requirement of using TLS syslog protocol. Single connector not able to handle much TLS handshake until it's performance degraded. In a restricted environment, remote collect window endpoint event is almost impossible. As such…
- over 2 years ago
- OpenText ArcSight
- ArcSight Ideas
ArcMC repository push/upload - dont stop batch job on failures

ianfitz1

Hi, Could you please change the way repository push/upload to containers works, and instead of failing at some random point in the list of connectors to which you are pushing the repo, skip the ones that fail, then at the end just give us a list of…
- over 2 years ago
- OpenText ArcSight
- ArcSight Ideas
Connector to support Microsoft Exchange Server 2019 Access Auditing logs, Mailbox Audit and Admin Audit logs

Tan Kb

Current connector versions support the following Exchange PowerShell versions and log types: Microsoft Exchange Server 2010 SP2 and 2013 Mailbox Audit and Admin Audit logs Microsoft Exchange Server 2016 Access Auditing logs Request to enhance the connector…
- over 2 years ago
- OpenText ArcSight
- ArcSight Ideas
Allow to restore "on premise" ArcMc backups to be restore in "containerized" ArcMc

Numb78

Actually the ability to restore "on premise" ArcMc instance in another one in container (installed in CDF as capability) is not allowed as clearly stated in ArcMc documentation. As for some customers, with a lot of nodes configured, the re-implementation…
- over 2 years ago
- OpenText ArcSight
- ArcSight Ideas
Allow to directly enroll TLS certificates that protect CDF applications (SOAR, Intelligence, Fusion, etc.)

Numb78

Customers usually needs to protect applications web access like SOAR, Intelligence, ESM CC with their own certificates enrolled by a corporate CA. Usually, when performing such operations, customer are allowed to produce a certificate request for the…
- over 2 years ago
- OpenText ArcSight
- ArcSight Ideas
ArcMC - preserve web_memory and MEMORY_SETTINGS on upgrade

ianfitz1

Hi, it would be really helpful if you could preserve the following 2 settings on ArcMC upgrade: 1) Preserve the existing setting for result below: $ARCMC_HOME/current/arcsight/bin/query_platform ... elif [ "$1" = "web_memory" ]; then *** result…
- over 2 years ago
- OpenText ArcSight
- ArcSight Ideas
Ability for ArcMC to cleanup backups/logs/etc from performing a connector framework upgrade.

Michael Dearing

Brief Description Ability for ArcMC to cleanup backups/logs/etc from performing a connector framework upgrade. Benefits / Value Given the recent vulnerabilities such as Log4j and having connectors installed on hosts that may not be accessible…
- over 2 years ago
- OpenText ArcSight
- ArcSight Ideas
ArcSight Logger and Connector FPE integration with Voltage SecureData via LDAP authentication method

Zephyr Koh

Current supported method for ArcSight FPE integration with Voltage SecureData is only using shared secret. However Voltage SecureData authentication method has option for LDAP as a method of authentication. Propose to add ldap as authentication method…
- over 2 years ago
- OpenText ArcSight
- ArcSight Ideas
ArcMC Bulk Edit Agent Wrapper

mcglynn1

Be nice if there is a way to bulk edit the agent wrapper in ArcMC like you can bulk edit agent.properties.
- over 2 years ago
- OpenText ArcSight
- ArcSight Ideas
SNMPv3 (SHA256 and SHA384 with AES256) for G10 appliance

lincoln.thum@e-

Request to support Logger and ArcMC SNMP polling/trap up to SNMPv3 (SHA256 and SHA384 with AES256).
- over 2 years ago
- OpenText ArcSight
- ArcSight Ideas

Menu

OpenText ArcSight

Add Destination Cleanup

request for support AES256 with SHA2 for Logger appliance

Can not create new rule in ArcMC with metric type Reciver EPS

ArcMC to support Multi Factor Authentication

Add report on devices reporting to ArcMc as an actual report or export

A new ArcSight architecture for SMB Companies

ArcMc Deployment and Topology Views Add Zoom Slider

Adopt a Heat Map approach to the Monitoring Summary Page

Enhancement to ArcMC on Connector Appliance to support HA and Device monitoring through Load Balancer

Enhancement request for ArcMC and Connector Host Appliance (CHA) to support higher number of on-board Containers/Connectors

ArcMC full IPv6 support for ArcMC WEB-GUI

To get the report of connector downtime/uptime report from ArcMc

Possibility to manually force the connector to specify which parser to use for which source

ArcMC (and sucessor) enhancement

PostgreSQL DB Integration With ArcSight Through Flex Connector

Support QUICK protocol for log collection / forwarding

ArcMC repository push/upload - dont stop batch job on failures

Connector to support Microsoft Exchange Server 2019 Access Auditing logs, Mailbox Audit and Admin Audit logs

Allow to restore "on premise" ArcMc backups to be restore in "containerized" ArcMc

Allow to directly enroll TLS certificates that protect CDF applications (SOAR, Intelligence, Fusion, etc.)

ArcMC - preserve web_memory and MEMORY_SETTINGS on upgrade

Ability for ArcMC to cleanup backups/logs/etc from performing a connector framework upgrade.

ArcSight Logger and Connector FPE integration with Voltage SecureData via LDAP authentication method

ArcMC Bulk Edit Agent Wrapper

SNMPv3 (SHA256 and SHA384 with AES256) for G10 appliance

Resources

Menu

Popular Tags

Resources