OpenText ArcSight Community

Region Based User Access in Arcsight logger 7.3

Ananthashesha S N

Hello All, There is a requirement from customer to customize the user accounts based on the regions. Access should be limited to the respective region and he should not be able to access other regions. As per the detailed check and confirmation from…
- 1 month ago
- OpenText ArcSight
- ArcSight Ideas
Logger Search syntax to allow searching for empty strings

Petr Rautenkranc

We would like to request the opportunity to search for „empty strings“ in Logger search by using following syntax with "Spacebar": " " (<Quotation mark><Spacebar><QuotationMark>) Example: destinationUserName IS NOT NULL and destinationUserName…
- 4 months ago
- OpenText ArcSight
- ArcSight Ideas
Could ArcSight Smart Connector Support Container logs in the future

Erin Lou

Hi, As the Title, ArcSIght Data Platform and the Cyber Services trend all about the container a rchitecture , used k8s or docker to manager the services. Would ArcSight Smart Connector Supported Container logs like K8s or docker logs; support…
- 9 months ago
- OpenText ArcSight
- ArcSight Ideas
Retrieve and display Logger's Current $now time for use in search/reporting

David Bush

Design a way to obtain the $Now value or current time of the ArcSight logger to be used in either epoch time or readable in a user defined user column. Something along the lines of: deviceVendor = "Microsoft" | rex "\srt=(?<RecTime>[^ ]*)"| eval …
- 11 months ago
- OpenText ArcSight
- ArcSight Ideas
Logger Migration - Improve level of detail provided in rsync of files

MajorW

You will see dozens of lines that say "waiting for data files copying...." As each file is copied, you get the confirmation, however there is no detail on which file was processed Knowing which file was just completed would help in the overall proc…
- over 1 year ago
- OpenText ArcSight
- ArcSight Ideas
A new ArcSight architecture for SMB Companies

Vladimir Boianji

Please consider building an ArcSight architecture for SMBs - ESM4SMB Unified architecture based on ESM with up to 25000 EPS (ESM4SMB), including 1. Based on ESM platform make licensing difference for correlation (ex ESM) and logging (ex logger) (A key…
- over 1 year ago
- OpenText ArcSight
- ArcSight Ideas
Enhancement request for ArcSight Logger to support higher storage capacity for online event storage

leeshin

Currently, there is limit of max 24T support for Logger Online Event Storage. Request is to enhance Logger to up this limit to even higher than 24T for online event storage. This will allows Logger for longer data retention
- over 1 year ago
- OpenText ArcSight
- ArcSight Ideas
AES256 support for logging peering

Tan Kb

To support higher Cipher AES256 and above peering between logger. Currently only AES 128 higher Cipher is supported.
- over 2 years ago
- OpenText ArcSight
- ArcSight Ideas
Logger online storage size expedition beyond 16TB

Leon Chiu

Though Logger support logger pool architecture to use multiple logger instances create bigger online storage space, but it will result data management issue, like one of logger pool instances crash will result data lost because of logger archiving setting…
- over 2 years ago
- OpenText ArcSight
- ArcSight Ideas
upgradation is actually degradation of features

Sagar Poladiya

Dear All, With reference to ticket - ref:_00D1tvhDP._5008e2fRT8:ref new Integration method enabled by Microsoft in MDATP for logs with Arcsight same provided by arcsight but new Smart connector is not able to capture details where as old version…
- over 2 years ago
- OpenText ArcSight
- ArcSight Ideas
Connector to support Microsoft Exchange Server 2019 Access Auditing logs, Mailbox Audit and Admin Audit logs

Tan Kb

Current connector versions support the following Exchange PowerShell versions and log types: Microsoft Exchange Server 2010 SP2 and 2013 Mailbox Audit and Admin Audit logs Microsoft Exchange Server 2016 Access Auditing logs Request to enhance the connector…
- over 2 years ago
- OpenText ArcSight
- ArcSight Ideas
Provide search builder function in Logger new search UI

Leon Chiu

Hi everyone, Logger classical search have an advanced search builder function to create search by easy combination the criterial together. In Logger new search didn't come with same capability, my idea is to provide same search builder. Regards…
- over 2 years ago
- OpenText ArcSight
- ArcSight Ideas
New Feature Request for Automatic enablement/disablement of Receivers on loggers with respect to storage utilization

socm

New Feature Request for Automatic enablement/disablement of Receivers on loggers with respect to storage utilization Eg. If Storage utilization hits 90%, then stop the receiver and if it hits 80% then enable the receivers
- over 2 years ago
- OpenText ArcSight
- ArcSight Ideas
SELinux Policy for Arcsight Logger

richhamilton

It appears that there is not a predefined SELinux policy available for Arcsight Logger. Microfocus should provide a policy or documentation on how to implement one using predefined policies for components such as Apache and PostgreSQL.
- over 3 years ago
- OpenText ArcSight
- ArcSight Ideas
Logger allocated memory more than 60%

Eng_SOP

Logger allocates about 60% of the total available memory to the processes which it then shares to the processes as configured either by roles or by processes. The allocation about 60% is too low. This limit should be tunable for servers with high amount…
- over 3 years ago
- OpenText ArcSight
- ArcSight Ideas
ArcSight Logger should be able to add/delete users using Windows AD group/user

Minos

Hi, When we need to use Distinguished Name to map it to a Windows AD user. ArcSight Logger should be able to add/delete user using Windows AD group/user directly. Thanks.
- over 3 years ago
- OpenText ArcSight
- ArcSight Ideas
Time taken to perform Logger reporting operations unacceptably long

ianfitz1

Hi there, Time taken to perform the following operations is far too long: Creating a query object from a Logger Unified Query- I have been waiting for the "Logger Search" popup in a greyed out state for over 10 minutes while trying to create a query…
- over 3 years ago
- OpenText ArcSight
- ArcSight Ideas
Password History Policy - Security Enhancement

Yi Hao

Dear MF Team, I would like to raise a feature request for password history policy on ArcMC and Logger. This would be a security enhancement for the product. Enforce password history policy setting determines the number of unique new passwords…
- over 3 years ago
- OpenText ArcSight
- ArcSight Ideas
ArcSight Logger Handling only 5 forwarders and 25 K EPS not sufficient for large Environment

sachin2020

Team, We have a large environment and multiple products being used for cybersecurity operations. We find it difficult to work with constraint as current logger supports only 5 forwarders and 25 k EPS. Please have this capacity increased in the subsequent…
- over 3 years ago
- OpenText ArcSight
- ArcSight Ideas
Export option for Logger

sachin2020

We do not have user export option in the Logger user management tab . Enabling this will help us better to track users and create user management reports for review and audit purposes. It is difficult to track all users in the current setup without the…
- over 3 years ago
- OpenText ArcSight
- ArcSight Ideas
Add a message to the Logger GUI that notifies the user their search query has been modified due to Daylight Savings Time.

richhamilton

As noted in the documentation Logger searches are affected by Daylight Savings Time. In some instances the search is modified by Logger to compensate for DST. There should be a message displayed in the GUI that lets the user know their search query changes…
- over 3 years ago
- OpenText ArcSight
- ArcSight Ideas
Provide A Method To Easily Distribute Network Model In ArcSight Logger

t_kachouba

For background, our environment event flow is SmartConnector > Logger > ESM. While a network model has been created in our ESM and all events are being tagged with the appropriate zone information it seems it is not possible to replicate the same network…
- over 3 years ago
- OpenText ArcSight
- ArcSight Ideas
Fix Java and Apache vulnerabilities on logger arcmc and ESM

saichandra

Hello Team, We can see there are lot of java , apache vulnerabilities on the logger , arcmc and ESM even on the latest versions and support just closes door on our face saying there is no Estimated time for closure. Being a security team , how we can…
- over 3 years ago
- OpenText ArcSight
- ArcSight Ideas
2FA support for Arcsight Logger

manojsharma31

2FA: 2 factor authentication should be enabled to Arcsight Logger. This will make Logger application more secure.
- over 3 years ago
- OpenText ArcSight
- ArcSight Ideas
Export option for logger audit logs

kuralmani11311

Hello Team, Would like to suggest the team to have a export option made available for the logger audit logs. At present we have audit forward to the destination of choice, but unfortunately we do not have an option to export the the audit logs directly…
- over 3 years ago
- OpenText ArcSight
- ArcSight Ideas

Menu

OpenText ArcSight

Region Based User Access in Arcsight logger 7.3

Logger Search syntax to allow searching for empty strings

Could ArcSight Smart Connector Support Container logs in the future

Retrieve and display Logger's Current $now time for use in search/reporting

Logger Migration - Improve level of detail provided in rsync of files

A new ArcSight architecture for SMB Companies

Enhancement request for ArcSight Logger to support higher storage capacity for online event storage

AES256 support for logging peering

Logger online storage size expedition beyond 16TB

upgradation is actually degradation of features

Connector to support Microsoft Exchange Server 2019 Access Auditing logs, Mailbox Audit and Admin Audit logs

Provide search builder function in Logger new search UI

New Feature Request for Automatic enablement/disablement of Receivers on loggers with respect to storage utilization

SELinux Policy for Arcsight Logger

Logger allocated memory more than 60%

ArcSight Logger should be able to add/delete users using Windows AD group/user

Time taken to perform Logger reporting operations unacceptably long

Password History Policy - Security Enhancement

ArcSight Logger Handling only 5 forwarders and 25 K EPS not sufficient for large Environment

Export option for Logger

Add a message to the Logger GUI that notifies the user their search query has been modified due to Daylight Savings Time.

Provide A Method To Easily Distribute Network Model In ArcSight Logger

Fix Java and Apache vulnerabilities on logger arcmc and ESM

2FA support for Arcsight Logger

Export option for logger audit logs

Resources

Menu

Popular Tags

Resources