OpenText ArcSight Community

Improving the calculation of tablespace sizes during ArcSight ESM installation, particularly on ArcSight ESM Appliances, to prevent storage-related issues

Oleh Buyvol

This enhancement request outlines the need for improving the calculation of tablespace sizes during ArcSight ESM installation, particularly on ArcSight ESM Appliances, to prevent storage-related issues and ensure optimal system performance. Summary…
- 9 months ago
- OpenText ArcSight
- ArcSight Ideas
Allow Logger Users&Groups Import and Export

jschwarcz

In reference to Support Ticket Case Number 02620253 , it would be nice to have the possibility to export existing users from the old Logger and import them into the new Logger instance. This would be useful also for Logger User Groups. Workaround with…
- over 1 year ago
- OpenText ArcSight
- ArcSight Ideas
Enable Syslog SmartConnectors to be able to read from a Kafka Topic

JoDarby

When event data in a Kafka topic is in syslog format it would make sense for the Syslog connector to be able to read from a Kafka topic. Currently we would have to add all syslog parsing to a Kafka Flex Connector. Better if we can make use of parsing…
- over 1 year ago
- OpenText ArcSight
- ArcSight Ideas
Enhancement to ArcMC on Connector Appliance to support HA and Device monitoring through Load Balancer

leeshin

For ArcMC on Connector Host Appliance (CHA), the appliance plays dual purposes of both a Device/Connector monitoring (ArcMC). and Connector hosts (with on-board connectors). However, there's no HA capability for ArcMC or Connector Host Appliances…
- over 1 year ago
- OpenText ArcSight
- ArcSight Ideas
AES256 support for logging peering

Tan Kb

To support higher Cipher AES256 and above peering between logger. Currently only AES 128 higher Cipher is supported.
- over 2 years ago
- OpenText ArcSight
- ArcSight Ideas
Create MIB file for logger hardware that output SNMP Trap alert

Tan Kb

To create MIB file for logger hardware that output SNMP trap alert with the following: 2022/11/13 14:00:00 SGT Alert:deviceHostName=Hostname.sample deviceIPAddress=IPaddress.sample deviceProduct=Product.sample deviceVendor=Vendor.sample cause…
- over 2 years ago
- OpenText ArcSight
- ArcSight Ideas
Support for unauthenticated mails via Fusion

fgutjahr

The current Fusion program logic does not allow sending mails without authentication to a mail server. However, I have already seen several environments that infrastructurally only use a mail relay without authentication possibility for sending mail…
- over 2 years ago
- OpenText ArcSight
- ArcSight Ideas
Support Google Cloud (GCP) as destination for SmartConnector for cloud log collection/forwarding

leeshin

Request is to have ArcSight SmartConnector to support Google Cloud as the Destination (kafka pub/sub topic). Currently, SmartConnector only supports AWS S3 and Azure Event Hub as cloud destinations. GCP is one of the common cloud platform and there…
- over 2 years ago
- OpenText ArcSight
- ArcSight Ideas
Digitally signed patches

Lokesh Bhasin

To get all the patches, hotfixes etc. digitally signed so that the customers can confirm the file is safe and it came from Micro Focus.
- over 2 years ago
- OpenText ArcSight
- ArcSight Ideas
Support QUICK protocol for log collection / forwarding

lincoln.thum@e-

There are more and more requirement of using TLS syslog protocol. Single connector not able to handle much TLS handshake until it's performance degraded. In a restricted environment, remote collect window endpoint event is almost impossible. As such…
- over 2 years ago
- OpenText ArcSight
- ArcSight Ideas
Allow to directly enroll TLS certificates that protect CDF applications (SOAR, Intelligence, Fusion, etc.)

Numb78

Customers usually needs to protect applications web access like SOAR, Intelligence, ESM CC with their own certificates enrolled by a corporate CA. Usually, when performing such operations, customer are allowed to produce a certificate request for the…
- over 2 years ago
- OpenText ArcSight
- ArcSight Ideas
Voltage SecureData FPE encryption strength

lincoln.thum@e-

Request to support of authentication and FPE encryption that meets SHA-384 standards
- over 3 years ago
- OpenText ArcSight
- ArcSight Ideas
Logger allocated memory more than 60%

Eng_SOP

Logger allocates about 60% of the total available memory to the processes which it then shares to the processes as configured either by roles or by processes. The allocation about 60% is too low. This limit should be tunable for servers with high amount…
- over 3 years ago
- OpenText ArcSight
- ArcSight Ideas
Solution required for update service account password in smart connectors automatically via PAM tools

Madana gopal Rajabather

Most of the organizations are implementing PAM solution & doing password vaulting. Some organization decided to change service account password periodically. Currently Service account password which are used to collect logs from servers need to be changed…
- over 3 years ago
- OpenText ArcSight
- ArcSight Ideas
SNMPv3 Privacy Protocol for AES256

lincoln.thum@e-

ArcSight Logger and ArcSight Connector's SNMPv3 for polling and traps only support up to AES128. Purpose : To increase the security level Meeting compliance and hardening standard
- over 3 years ago
- OpenText ArcSight
- ArcSight Ideas
SNMPv3 Authentication Protocol for SHA2

lincoln.thum@e-

ArcSight Logger and ArcSight Connector's SNMPv3 for polling and traps only support up to SHA. Purpose : To increase the security level Meeting compliance and hardening standard
- over 3 years ago
- OpenText ArcSight
- ArcSight Ideas
Silent install for CONSOLE MODE

acappelli

All silent installs for ArcMC, Logger and ESM start out with creating the installer file from the GUI no direction on how to create it from the console mode. There are installations that do not enable GUI X on there servers. Please provide direction on…
- over 3 years ago
- OpenText ArcSight
- ArcSight Ideas
Script to enable fips, automate fips

acappelli

It would be nice to have an automation script or gui menu item to switch product into fips mode instead of going through the task of open ssl and alot of CLI.
- over 3 years ago
- OpenText ArcSight
- ArcSight Ideas
ArcSight Logger Bulk delete default certificates

acappelli

Bulk deletion of the default certs that get ship with ArcSight Logger, a few are ok but why so many and why delete only one at a time. Maybe a script can also be used.
- over 3 years ago
- OpenText ArcSight
- ArcSight Ideas
Open-source lightweight connector developed and maintained by community

ankitsynx

Hi There, Arcsight can overcome it's intergration limitions which is often setback by delayed updates to parsers and device support for ever increasing log monitroing requirements. As a SIEM architect and consultant myself I always have been expecting…
- over 4 years ago
- OpenText ArcSight
- ArcSight Ideas
Remote management for specialist connectors

RHeselwood

Would it be possible to enable remote management onto specialist connector types? Looking at specific examples of "specialist connector types", the MISP connector and forwarding connectors. As a MSS with multiple environments and customers we want to…
- over 4 years ago
- OpenText ArcSight
- ArcSight Ideas
Support to deploy rule content and enable/disable/sync rules by ESM APIs

Leon Chiu

Hi ArcSight PMs The idea is to let ESM APIs able to deploy rule content and enable/disable rules in ESM. And also leverage APIs to synchronized rules in different ESM instances, to result in ESM HA function. Regards Leon Chiu
- over 4 years ago
- OpenText ArcSight
- ArcSight Ideas
Logger cluster

angelo cappelli

Deploy Logger as a cluster with replication across nodes.
- over 4 years ago
- OpenText ArcSight
- ArcSight Ideas
User login by ldap authentication

_mki

Allow users to access ArcMC, Logger and ESM through ldap authentication and group membership. Define access rights by the group membership. No local user definition or special rights assignment for those users are expected, thus accepting that for those…
- over 4 years ago
- OpenText ArcSight
- ArcSight Ideas
Windows 10 Platform support

RHeselwood

With the restrictions of support forWindows event collections now down to WINC only, we find ourselves being forced to deploy a Windows platform in our customer environments to ensure we collect logs in a secure and stable manner. When looking at what…
- over 4 years ago
- OpenText ArcSight
- ArcSight Ideas

Menu

OpenText ArcSight

Improving the calculation of tablespace sizes during ArcSight ESM installation, particularly on ArcSight ESM Appliances, to prevent storage-related issues

Allow Logger Users&Groups Import and Export

Enable Syslog SmartConnectors to be able to read from a Kafka Topic

Enhancement to ArcMC on Connector Appliance to support HA and Device monitoring through Load Balancer

AES256 support for logging peering

Create MIB file for logger hardware that output SNMP Trap alert

Support for unauthenticated mails via Fusion

Support Google Cloud (GCP) as destination for SmartConnector for cloud log collection/forwarding

Digitally signed patches

Support QUICK protocol for log collection / forwarding

Allow to directly enroll TLS certificates that protect CDF applications (SOAR, Intelligence, Fusion, etc.)

Voltage SecureData FPE encryption strength

Logger allocated memory more than 60%

Solution required for update service account password in smart connectors automatically via PAM tools

SNMPv3 Privacy Protocol for AES256

SNMPv3 Authentication Protocol for SHA2

Silent install for CONSOLE MODE

Script to enable fips, automate fips

ArcSight Logger Bulk delete default certificates

Open-source lightweight connector developed and maintained by community

Remote management for specialist connectors

Support to deploy rule content and enable/disable/sync rules by ESM APIs

Logger cluster

User login by ldap authentication

Windows 10 Platform support

Resources

Menu

Popular Tags

Resources