OpenText ArcSight Community

Knowledge Document: [SOAR] Error: 'No active license' due to a DNS issue

Caroline Oest

This issue is part of KM000008641. Environment ArcSight SOAR 3.11.0 Situation The SOAR UI displays a license error, as shown in the screenshot below: After following the instructions in KM000008641, the issue was not resolved…
- 23 hours ago
- OpenText ArcSight
- ArcSight Tips
Knowledge Document: Palo Alto Cortex XSOAR integration with ArcSight ESM

Caroline Oest

This article provides the steps for doing the integration of the Palo Alto Cortex XSOAR platform with ArcSight ESM Environment ArcSight Enterprise Security Manager (ESM) 7.X.X Software and Appliance Form Factor Situation As part of…
- 1 day ago
- OpenText ArcSight
- ArcSight Tips
Knowledge Document: ArcSight LoadBalancer unable to start after upgraded from version 8.4.0 to version 8.4.6 and higher

Caroline Oest

This KM described how to address the issue ArcSight LoadBalancer unable to start after upgraded from version 8.4.0 to version 8.4.6 and higher due to the node version mismatch. Environment ArcSight LoadBalancer 8.4.0 upgrade to 8.4.6 and…
- 7 days ago
- OpenText ArcSight
- ArcSight Tips
Knowledge Document: ArcSight SmartConnector RegEx FlexConnector not reading new logs in real time

Caroline Oest

ArcSight FlexConnector Regex Folder File does not read logs in real time as logs are updating. Solution is to use “ArcSight FlexConnector Regex File” instead of “ArcSight FlexConnector Regex Folder File” and configure preservestate=true and startatend…
- 7 days ago
- OpenText ArcSight
- ArcSight Tips
Creating Dashboards Using Active List Data in ArcSight

Prashant Nakum

Hi, I have a use case where I want to create dashboards using data from an Active List in ArcSight. My questions are: Can I create the dashboard using active list in Logger? Which components of ArcSight can I use to create dashboards with Active…
- 12 days ago
- OpenText ArcSight
- ArcSight Discussions
Automating Python Script Execution with Event Fields as Parameter in ArcSight

Prashant Nakum

Hi, I'm new to ArcSight and have a use case where I need to execute a Python script at specific time intervals which call the third party APIs. The script will take certain fields from the events as parameters. My questions are: How can I automatically…
- 12 days ago
- OpenText ArcSight
- ArcSight Discussions
Storing Script Command Results for Dashboard Creation in ArcSight

Prashant Nakum

Hi, I have a use case in which I have scheduled a script integration command using a rule. The script command returns result data, and I would like to use that data to create a dashboard. My question is: Where can I store the result data from the…
- 12 days ago
- OpenText ArcSight
- ArcSight Discussions
Best Component for Creating Dashboards in ArcSight

Prashant Nakum

Hi, I'm new to ArcSight and would like to create dashboards. However, I'm a bit confused about which component of ArcSight is best suited for dashboard creation, as there are several components available. Could someone please guide me on which one…
- 12 days ago
- OpenText ArcSight
- ArcSight Discussions
Knowledge Document: Checking components' version on ESM

Caroline Oest

Environment ArcSight Enterprise Security Manager (ESM) all version Situation Checking apache's version and other components' version such as Tomcat, MySQL, PostgreSQL for CVE investigation purpose or confirm version after upgrading. Read full…
- 13 days ago
- OpenText ArcSight
- ArcSight Tips
Knowledge Document: Logger software 'apache' service unable to start

Caroline Oest

Process 'apache' Execution failed due to port 443 is already in use and need to be stopped completely before starting it Environment Logger software 7.x Situation Process 'apache' Execution failed. Stop and start the service seperately…
- 13 days ago
- OpenText ArcSight
- ArcSight Tips
Knowledge Document: The root password cannot be changed after a Logger appliance OS has been upgraded to RHEL 8.8

Caroline Oest

After a Logger appliance OS has been upgraded to RHEL 8.8, the root password cannot be changed Environment Logger L7700 OS upgrade from RHEL 7.9 to 8.8 Situation After a Logger appliance OS has been upgraded from RHEL 7.9 to RHEL…
- 13 days ago
- OpenText ArcSight
- ArcSight Tips
Knowledge Document: Logger's configurations are not restored after restoring config backup

Caroline Oest

Logger's configurations are not restored after restoring config backup due to the restore procedure is not able to decompress them due to a missing RHEL 8.8 required parameter Environment Logger L7700 appliance running on RHEL 8.8 Software…
- 13 days ago
- OpenText ArcSight
- ArcSight Tips
Executing Integration Command with Parameters Using a Rule

Prashant Nakum

Hello, I'm new to the ArcSight platform and need assistance with a requirement. Specifically, I want to execute a script and store the results in a lookup file. Here's the overall workflow: I have created a rule that is scheduled to trigger every…
- 13 days ago
- OpenText ArcSight
- ArcSight Discussions
Executing Integration Command with Parameters Using a Rule

Prashant Nakum

Hello, I'm new to the ArcSight platform and need assistance with a requirement. Specifically, I want to execute a script and store the results in a lookup file. Here's the overall workflow: I have created a rule that is scheduled to trigger every…
- 13 days ago
- OpenText ArcSight
- ArcSight Discussions
Creating and Integrating a Smart Connector into the Existing ArcSight Infrastructure

Prashant Nakum

Hello, I’m new to the ArcSight platform and I’m looking to integrate a third-party threat intelligence feed with ArcSight. The feed data will be provided through an API, and I want to ingest this data into ArcSight for threat analysis. ArcSight already…
- 14 days ago
- OpenText ArcSight
- ArcSight Discussions
Knowledge Document: Can not install chkconfig package with error message “Error unpacking rpm package”

Caroline Oest

Configuring the arcsight service startup behavior require to use chkconfig tool to modifying startup mode. However installing chkconfig may face “Error unpacking rpm package” issue due to the system is unable to create the symbolic link for the installation…
- 15 days ago
- OpenText ArcSight
- ArcSight Tips
New ArcSight ESM Administrator and Analyst Training Class

Caroline Oest

Learn how to use the ArcSight console and ArcSight Command Center to monitor security events, configure ESM, manage users, and manage ESM network intelligence resources. You will also be introduced to triaging and resolving cases with ArcSight SOAR. …
- 27 days ago
- OpenText ArcSight
- ArcSight Tips
Updated ArcSight ESM Advanced Administrator Training Class

Caroline Oest

3-7305 - ArcSight ESM Advanced Administrator - On Demand On Demand Courses are valid for 30 days and can be purchased directly using your credit card. Hands-on Labs provided when you purchase individual self-paced course, as a subscription users you…
- 27 days ago
- OpenText ArcSight
- ArcSight Tips
Knowledge Document: Restoring the itom-vault pod of ArcSight Platform using a backup

Caroline Oest

A workaround is presented when the "itom-vault" is in a CrashLoopBackOff status and most be recovered using a backup Environment ArcSight Platform cluster 2X.X.X Situation The "itom-vault" pod is in a CrashLoopBackOff status. Find…
- 27 days ago
- OpenText ArcSight
- ArcSight Tips
Knowledge Document: DOSProtector Truncation Messages in SmartConnector Logs

Caroline Oest

Error message appears in the connector agent.log [ERROR][default.com.arcsight.agent.loadable._DOSProtector][run] Field [requestUrl] truncated to [http://<longURLmessage>] (message=3531, rawEvent=279, requestUrl=159809) Environment Connector…
- 27 days ago
- OpenText ArcSight
- ArcSight Tips
Knowledge Document: Checking if a Connector is dropping events

Caroline Oest

Some steps are shared on how to verify if a Connector is dropping events Environment ArcSight SmartConnector (Connector) 8.X.X Situation As part of an audit process, it must be checked if a Connector or Connectors are dropping events…
- 27 days ago
- OpenText ArcSight
- ArcSight Tips
Knowledge Document: Clarifications about the "mysql.session" and "mysql.sys" users in the MySQL database of ESM

Caroline Oest

Some clarifications are provided regarding the internal users "mysql.session" and "mysql.sys" which are present in the MySQL database of ESM Environment ArcSight Enterprise Security Manager (ESM) 7.X.X Situation As part of an audit…
- 27 days ago
- OpenText ArcSight
- ArcSight Tips
Knowledge Document: Fix runagentsetup script unable to start in SmartConnectors

Caroline Oest

This KM described how to fix the issue runagentsetup script not able to start in SmartConnectors. Environment SmartConnector version 8.x Windows Server 2022 Situation The script runagentsetup executed but nothing happened. SmartConnectors…
- 27 days ago
- OpenText ArcSight
- ArcSight Tips
Knowledge Document: Zombie processes do not allow the runagentsetup of a Connector to run properly

Caroline Oest

A workaround is presented on how to find zombie processes that may be blocking the execution of the runagentsetup script of a Connector Environment ArcSight SmartConnector (Connector) 8.X.X Situation When executing the runagentsetup…
- 1 month ago
- OpenText ArcSight
- ArcSight Tips
Do not stop selling the ArcSight Logger software

Louis Lai

In order to meet the needs of the vast logging compliance market, we hope that we will not stop selling Logger products just to increase revenue by selling Recon. The Logger pure software market still has its advantages, so it is strongly recommended…
- 1 month ago
- OpenText ArcSight
- ArcSight Ideas

Menu

OpenText ArcSight

Knowledge Document: [SOAR] Error: 'No active license' due to a DNS issue

Knowledge Document: Palo Alto Cortex XSOAR integration with ArcSight ESM

Knowledge Document: ArcSight LoadBalancer unable to start after upgraded from version 8.4.0 to version 8.4.6 and higher

Knowledge Document: ArcSight SmartConnector RegEx FlexConnector not reading new logs in real time

Creating Dashboards Using Active List Data in ArcSight

Automating Python Script Execution with Event Fields as Parameter in ArcSight

Storing Script Command Results for Dashboard Creation in ArcSight

Best Component for Creating Dashboards in ArcSight

Knowledge Document: Checking components' version on ESM

Knowledge Document: Logger software 'apache' service unable to start

Knowledge Document: The root password cannot be changed after a Logger appliance OS has been upgraded to RHEL 8.8

Knowledge Document: Logger's configurations are not restored after restoring config backup

Executing Integration Command with Parameters Using a Rule

Executing Integration Command with Parameters Using a Rule

Creating and Integrating a Smart Connector into the Existing ArcSight Infrastructure

Knowledge Document: Can not install chkconfig package with error message “Error unpacking rpm package”

New ArcSight ESM Administrator and Analyst Training Class

Updated ArcSight ESM Advanced Administrator Training Class

Knowledge Document: Restoring the itom-vault pod of ArcSight Platform using a backup

Knowledge Document: DOSProtector Truncation Messages in SmartConnector Logs

Knowledge Document: Checking if a Connector is dropping events

Knowledge Document: Clarifications about the "mysql.session" and "mysql.sys" users in the MySQL database of ESM

Knowledge Document: Fix runagentsetup script unable to start in SmartConnectors

Knowledge Document: Zombie processes do not allow the runagentsetup of a Connector to run properly

Do not stop selling the ArcSight Logger software

Resources

Menu

Popular Tags

Resources