OpenText ArcSight Community

Provide all recommended firmware updates for Arcsight Appliances

Joshua Megerman

The most recent OS update for the Arcsight 7700 (HPE G10) appliance includes firmware updates for the system BIOS and iLO, but not for additional system deices like the RAID controller, HDDs and other installed hardware. Please provide the latest firmware…
- 1 day ago
- OpenText ArcSight
- ArcSight Ideas
Adapt additional data mapping for TH architecture

Jan Slama

That would be great to adapt additional data mapping from ESM on other than ESM destination, as this one is used only for AUP updates with events filtered out when ArcsightPlatform Transformation Hub does the event transport.
- 1 month ago
- OpenText ArcSight
- ArcSight Ideas
Adding Secondary Contact information to the Person Record in SMAX

Harshith venkataraghava Vutukuri

Hi Team, Can you please add the secondary contact information to the SMAX Person Record, So that if we can't reach to the customer via primary contact details we can use the secondary contact. And also please enable that secondary contact details for…
- 5 months ago
- OpenText ArcSight
- ArcSight Ideas
Adding a feed database to ArcSight (on the example of AlienVault OTX)

Bohdan Hotsuliak

Hello, I think from the title it is already clear what I need your help with. I'm relatively new to this field and ArcSight, so I'm really hoping you can point me to some text or video resources detailing how to connect a feed base to ArcSight…
- 6 months ago
- OpenText ArcSight
- ArcSight Ideas
All monitor device is ambiguous

Vikas Rawat

All monitor device is ambiguous. Need to develop in such a way that we can easily monitor the end device integrated with ArcSight.
- 6 months ago
- OpenText ArcSight
- ArcSight Ideas
Request for Inclusion of Email Gateway Security Device Mail Marshal in SOAR automation/Blocking

Soc Analyst

Hi Team, We're using arcsight SIEM & SOAR for last 6 years & 1 year respectively. We need to integrate Mail Marshal which is used as email gateway security in our organization. Kindly consider integrating the device with SOAR asap. We also can project…
- 6 months ago
- OpenText ArcSight
- ArcSight Ideas
Add execution time to Jobs view in ESM Console

Dale Dowden

The Scheduled Jobs viewer in the ESM Console will show most of the needed information on the summary screen, but you have to click on an individual job to see the execution time. When you have hundreds of jobs this would be more beneficial on the summary…
- 6 months ago
- OpenText ArcSight
- ArcSight Ideas
Fix Azure Event Hub firewall Logs that is not properly parsed

Patrick Srowig

Hi Team, Please ensure to parse these azure traffic logs on the next version of arcsight azure event hub smart connector. Currently the logs are just placed under the message field and not parsed properly. Please let us know when this has been done 1…
- 7 months ago
- OpenText ArcSight
- ArcSight Ideas
Improving the calculation of tablespace sizes during ArcSight ESM installation, particularly on ArcSight ESM Appliances, to prevent storage-related issues

Oleh Buyvol

This enhancement request outlines the need for improving the calculation of tablespace sizes during ArcSight ESM installation, particularly on ArcSight ESM Appliances, to prevent storage-related issues and ensure optimal system performance. Summary…
- 9 months ago
- OpenText ArcSight
- ArcSight Ideas
Could ArcSight Smart Connector Support Container logs in the future

Erin Lou

Hi, As the Title, ArcSIght Data Platform and the Cyber Services trend all about the container a rchitecture , used k8s or docker to manager the services. Would ArcSight Smart Connector Supported Container logs like K8s or docker logs; support…
- 9 months ago
- OpenText ArcSight
- ArcSight Ideas
ArcSight ESM - Enable or allow or make ESM Server uses or understand the "character map ISO_8859-1".

emhata

ArcSight ESM - Enable or allow or make ESM Server uses or understands the "character map ISO_8859-1". ISO/IEC 8859-1 - Wikipedia Ax NBSP ¡ ¢ £ ¤ ¥ ¦ § ¨ © ª « ¬ SHY ® ¯ Bx ° ± ² ³ ´ µ …
- 9 months ago
- OpenText ArcSight
- ArcSight Ideas
Make a YouTube Session on How To Use ESM API

Ali

We need more clarification on How To Use ESM API , as the guide and Volume are nor cleared enough!
- 10 months ago
- OpenText ArcSight
- ArcSight Ideas
Skyhigh is not supported for ArcSight Connector

MW

Client requests onboarding SkyHigh to their SIEM platform and after raising a ticket I've received confirmation that SkyHigh is not support. When will ArcSight start supporting SkyHigh?
- over 1 year ago
- OpenText ArcSight
- ArcSight Ideas
Arcsight ESM Console for MS Windows Server 2022

Ibrahim kalil Sylla

Hello, Can you patch ESM console in order to support MS Windows Server 2022 for Installation. It is not able to install on it. MS windows Server 2019 standard support take end in Jan 2024.
- over 1 year ago
- OpenText ArcSight
- ArcSight Ideas
Palo Alto IPS event categorization

simon.simcic@sr

Hi, Can you please modify or make the "THREAT" events from Palo Alto more category specific as it seems that /Compromise in Category Significance And /Exploit/Vulnerability in Category Technique Which in turn triggers the base content quite…
- over 1 year ago
- OpenText ArcSight
- ArcSight Ideas
Request to have additional information include in ESM API for Rules

cory.thompson@h

We would also like to request that the ESM API shows the status of the Rule. If it is enabled or disabled when using the API call /rules/{id}/getRuleDefinition
- over 1 year ago
- OpenText ArcSight
- ArcSight Ideas
[ArcSight ESM] Restriction on concurrent login to ESM console and command center

hshi1

ESM does not restrict the number of concurrent login sessions for a single user account on console and command center login. There should be a way to allow customer to disable concurrent user logins or restrict on how many concurrent login is allowed…
- over 1 year ago
- OpenText ArcSight
- ArcSight Ideas
The destination and target ralated words were translate to same chinese word (”目标“,UTF-8 \u76ee\u6807)

Guangming Zhao

All destination and target related words were translate to same chinese word (”目标“,UTF-8 \u76ee\u6807) in ESM console(ACC) chinese version. It cause some trouble, for example, in CCE(console ,chinese), a rule editor can't confirm what means of the chinese…
- over 1 year ago
- OpenText ArcSight
- ArcSight Ideas
ArcSight ESM online storage extend to 24T

Leon Chiu

Hi Everyone, Since Logger online storage have been extend to support 24T, we will like to ask this online storage limit also apply to ESM. Regards Leon Chiu
- over 1 year ago
- OpenText ArcSight
- ArcSight Ideas
A new ArcSight architecture for SMB Companies

Vladimir Boianji

Please consider building an ArcSight architecture for SMBs - ESM4SMB Unified architecture based on ESM with up to 25000 EPS (ESM4SMB), including 1. Based on ESM platform make licensing difference for correlation (ex ESM) and logging (ex logger) (A key…
- over 1 year ago
- OpenText ArcSight
- ArcSight Ideas
Sysmon Connector Enhancement - Parse New Sysmon Events

jklein

The current 8.4 release of the Sysmon parser does not include events that have been out for a while. Sysmon event IDs 24 through 28 are not parsed by default. Simply adding the following to the default parser (microsoft_windows_sysmon.sdkkeyvaluefilereader…
- over 1 year ago
- OpenText ArcSight
- ArcSight Ideas
ZScalar Cloud Proxy Configuration Guide for ArcSight Integration

SanyamRustagi11

Hi Team , I am submitting this as an idea on the MF Portal for ZScalar Cloud Proxy Integration Guide with ArcSight SIEM . Currently there is no Device Configuration guide as well as Event Mapping for ZScalar Cloud Proxy Logs to ArcSIght . Looking…
- over 1 year ago
- OpenText ArcSight
- ArcSight Ideas
Please help to enhance the use of Chinese functions on Arcsight products.

hongying Pu

Hi Team, I have a customer whose work environment uses Chinese, so his ESM settings are also in Chinese, but when exporting the report, adding the time ${NOW} causes the report to become in .dat format. Because in the Chinese environment, the time is…
- over 1 year ago
- OpenText ArcSight
- ArcSight Ideas
About Apache Default IndeAbout

takayuki kitabayashi

Nessus has detected the following vulnerabilities in the ESM. *from Nessus 106230 Apache Default Index Page (Medium) https://www.tenable.com/plugins/nessus/106230 I have commented out the following string in the configuration file below to prevent…
- over 1 year ago
- OpenText ArcSight
- ArcSight Ideas
uCMDB - ArcSight Integration

Sakuru

I am "Customer Success Manager" for YES BANK. The inventory information which is available in uCMDB ( Master Inventory ), need to be synced with the monitoring inventory under ArcSight. If a delta is identified, then the ArcSight admin needs to be notified…
- over 2 years ago
- OpenText ArcSight
- ArcSight Ideas

Menu

OpenText ArcSight

Provide all recommended firmware updates for Arcsight Appliances

Adapt additional data mapping for TH architecture

Adding Secondary Contact information to the Person Record in SMAX

Adding a feed database to ArcSight (on the example of AlienVault OTX)

All monitor device is ambiguous

Request for Inclusion of Email Gateway Security Device Mail Marshal in SOAR automation/Blocking

Add execution time to Jobs view in ESM Console

Fix Azure Event Hub firewall Logs that is not properly parsed

Improving the calculation of tablespace sizes during ArcSight ESM installation, particularly on ArcSight ESM Appliances, to prevent storage-related issues

Could ArcSight Smart Connector Support Container logs in the future

ArcSight ESM - Enable or allow or make ESM Server uses or understand the "character map ISO_8859-1".

Make a YouTube Session on How To Use ESM API

Skyhigh is not supported for ArcSight Connector

Arcsight ESM Console for MS Windows Server 2022

Palo Alto IPS event categorization

Request to have additional information include in ESM API for Rules

[ArcSight ESM] Restriction on concurrent login to ESM console and command center

The destination and target ralated words were translate to same chinese word (”目标“,UTF-8 \u76ee\u6807)

ArcSight ESM online storage extend to 24T

A new ArcSight architecture for SMB Companies

Sysmon Connector Enhancement - Parse New Sysmon Events

ZScalar Cloud Proxy Configuration Guide for ArcSight Integration

Please help to enhance the use of Chinese functions on Arcsight products.

About Apache Default IndeAbout

uCMDB - ArcSight Integration

Resources

Menu

Popular Tags

Resources