OpenText ArcSight Community

MSSPs need a data export capability for departing customers.

David Lash

While the occurrence is not frequent, MSSPs will occasionally lose a customer and may be required to deliver historical data to that customer to satisfy their forensic and audit compliance requirements. Presumably this facility would be part of Recon…
- 7 months ago
- OpenText ArcSight
- ArcSight Ideas
Could ArcSight Smart Connector Support Container logs in the future

Erin Lou

Hi, As the Title, ArcSIght Data Platform and the Cyber Services trend all about the container a rchitecture , used k8s or docker to manager the services. Would ArcSight Smart Connector Supported Container logs like K8s or docker logs; support…
- 9 months ago
- OpenText ArcSight
- ArcSight Ideas
ArcSight Platform/Recon - Sharing Saved Queries, Saved Criterias, Field Sets

Jan Š.

Please make possible to share Saved Query, Saved Criteria (like Saved Search in Logger) and Field Sets between platform users like in Logger.
- over 1 year ago
- OpenText ArcSight
- ArcSight Ideas
Change the 10.000.000 events limit in Recon to rows

gcrespo

Hi, We have hit the limitation of 10.000.000 events in Recon. This limit is absurd. It didn't even exist in Logger (the limit was 1.000.000 rows, not events). With this limitation, Recon is completely useless for forensic purposes or Threat Hunting…
- over 1 year ago
- OpenText ArcSight
- ArcSight Ideas
ArcSight Fusion Reporting - Add User ACL permissions to folders.

LewisJ

Currently in the new reporting suite, you cannot control the folders that users have access to. if a user has read permissions to reporting, then they currently have access to every report and dashboard in the system. Proposal - Enable the functionality…
- over 1 year ago
- OpenText ArcSight
- ArcSight Ideas
Fusion(Recon) import user from LDAP

Minos

Hi, Right now, we need to create users manually on Fusion(Recon) and then we can use it to map with an LDAP server. We need a function to import users from an LDAP server without manually creating it. Thanks, Minos.
- over 1 year ago
- OpenText ArcSight
- ArcSight Ideas
Recon Report creation - available function of Vertica need to be listed from editor

Teacher K

When we create a new report, I wish to see the available list of function of the Vertica database query with examples or simple syntax examples on UI so that we don't see and search it from Vertica manual.
- over 2 years ago
- OpenText ArcSight
- ArcSight Ideas
Allow to directly enroll TLS certificates that protect CDF applications (SOAR, Intelligence, Fusion, etc.)

Numb78

Customers usually needs to protect applications web access like SOAR, Intelligence, ESM CC with their own certificates enrolled by a corporate CA. Usually, when performing such operations, customer are allowed to produce a certificate request for the…
- over 2 years ago
- OpenText ArcSight
- ArcSight Ideas
cron jobs on master node of ArcSight DB

Piotr K

On the primary node of ArcSight DB there have been a number of scripts and corresponding cronjobs (see the list below). The concern is that with all that placed on a single node single point of failure is created. Will multiplication of the cronjobs…
- over 2 years ago
- OpenText ArcSight
- ArcSight Ideas
Recon quick field filter in Event Details view panel on right

hnevky

The Recon Event Details view panel on right displays a full set of event fields that you can trim down to populated only. That is great for overview, but could be cumbersome for detail investigation of specific field or value. Could you add a "Quick…
- over 3 years ago
- OpenText ArcSight
- ArcSight Ideas
Please add these ArcSight Recon Threat Hunting searches as content (Searches and Reports)

steve-m

Please add these ArcSight Recon Threat Hunting Searches to the product. This content can be used as searches, but should also be added as reporting content. The value of this content is for customers who are not using ArcSight ESM and not forwarding correlation…
- over 3 years ago
- OpenText ArcSight
- ArcSight Ideas
arcsight ideas

Thomas69

ArcMC (3.0): - remove the "bulk operation" options from node management; sometimes it's annoying that we can click operations such as "scan host" then it tells it's deprecated and go to bulk operations - bulk operations: when i select multiple hosts…
- over 3 years ago
- OpenText ArcSight
- ArcSight Ideas
Produce MISP IoCs into THub, provide ability to consume them by the ArcSight portfolio.

steve-m

This ideas is to modify the MISP MIC to produce IoCs to a THub topic. With these in THub, the ArcSight portfolio can consume these from a central location. ESM would consume these IoCs and populate Active Lists. Recon would consume them and populate Lookup…
- over 3 years ago
- OpenText ArcSight
- ArcSight Ideas
Add a check for execution permissions on /tmp for platform installer.

AlexanderReynolds

When installing the arcsight platform the node_prereq binary/script is transferred to the nodes on /tmp and if noexec is applied to that directory as a mount option the installer will fail with no detailed error message. Can logging or the script…
- over 3 years ago
- OpenText ArcSight
- ArcSight Ideas
ArcSight support to install on the Rocky Linux 8

Eric3

CentOS 8.x will be the end of support this year. Please support the product of ArcSight series can install on the Rocky Linux 8.
- over 3 years ago
- OpenText ArcSight
- ArcSight Ideas
One stop shop support matrix for all products and versions.

Kyle Pearson

It is currently tedious to find out the support for all the various products having to go admin guides for some products and release notes of others especially as the ecosystem continues to grow with the platform, SOAR etc. Can we please get a single…
- over 3 years ago
- OpenText ArcSight
- ArcSight Ideas
LoggerToNNMi Replacement

Timon

Add an integration with Network Node Manager i (NNMi) using the new ArcSight Platform: Currently: Smart Connector --> Logger --> LoggerToNNMi Connector --> NNMi Ideas: Smart Connector --> Transformation Hub --> LoggerToNNMi Connector --> NNMi…
- over 3 years ago
- OpenText ArcSight
- ArcSight Ideas
Support of SNMPv3 for ArcSight Unified SNMP Connector

Lee Shin

i) Currently, the ArcSight Unified SNMP Connector only supports SHA (on the agent setup wizard UI). For compliance, standard and continuous security update in sync with best practice in market, we would request the support of SNMPv3 to be at least on…
- over 3 years ago
- OpenText ArcSight
- ArcSight Ideas
Move from Shell script based implementation to python based implementation for Arcsight

saichandra

Majority of the Arcsight is still based on shell scripts , however it is easy but it always give great dependency on OS version. On the other hand when moved to python based it give large flexibility on OS dependency.
- over 3 years ago
- OpenText ArcSight
- ArcSight Ideas
Allow more special characters for Logger Configuration Backup SCP passwords

lwalcher

Currently (as noted on Page 496 of the Logger 7.1.1 Administrator's Guide) certain special characters are prohibited for use in the password when creating a Configuration Backup. This limits the ability of the customer to use more complex passwords for…
- over 3 years ago
- OpenText ArcSight
- ArcSight Ideas
Convert or consume only specific logs to avro from th-cef

saichandra

As of now whatever goes to th-cef gets converted to avro If we want to control what has to go to avro , it would be great. So that we have more control what is going to ESM or Investigate/Recon
- over 4 years ago
- OpenText ArcSight
- ArcSight Ideas
Storage Groups or multiple retentions on vertica /Recon/Investigate

saichandra

Hello Team, Its good if we can get something like storage groups on vertica as well for multiple retentions on logs. As of its global single retention on vertica. Vertica is used with Investigate/Recon.
- over 4 years ago
- OpenText ArcSight
- ArcSight Ideas
Logger transaction operator - allow sessions and durations to be based on endTime

ianfitz

Hi, Currently if we have a complex search using the transaction operator, durations are only calculated based on session start and end time according to the field Event Time (which is Logger Receipt Time). We can now search Logger based on endTime, but…
- over 4 years ago
- OpenText ArcSight
- ArcSight Ideas
Increase Logger search limits

ianfitz1

I see in search options I can now increase displayed results past 1 million, now up to 10 million. Is it possible to increase that limit further? Also can you expose some other parameters that limit the chart functions, scan limits, sorts etc to the…
- over 4 years ago
- OpenText ArcSight
- ArcSight Ideas
Logger email alert customization

simon.simcic@sr

Hi, I would suggest the ability on the customizations over alerts in Logger. Did not try it in version 7, but if you use alerts in Logger and trigger on an event, then the email message contains the entire CEF event, which is not really informative…
- over 4 years ago
- OpenText ArcSight
- ArcSight Ideas

Menu

OpenText ArcSight

MSSPs need a data export capability for departing customers.

Could ArcSight Smart Connector Support Container logs in the future

ArcSight Platform/Recon - Sharing Saved Queries, Saved Criterias, Field Sets

Change the 10.000.000 events limit in Recon to rows

ArcSight Fusion Reporting - Add User ACL permissions to folders.

Fusion(Recon) import user from LDAP

Recon Report creation - available function of Vertica need to be listed from editor

Allow to directly enroll TLS certificates that protect CDF applications (SOAR, Intelligence, Fusion, etc.)

cron jobs on master node of ArcSight DB

Recon quick field filter in Event Details view panel on right

Please add these ArcSight Recon Threat Hunting searches as content (Searches and Reports)

arcsight ideas

Produce MISP IoCs into THub, provide ability to consume them by the ArcSight portfolio.

Add a check for execution permissions on /tmp for platform installer.

ArcSight support to install on the Rocky Linux 8

One stop shop support matrix for all products and versions.

LoggerToNNMi Replacement

Support of SNMPv3 for ArcSight Unified SNMP Connector

Move from Shell script based implementation to python based implementation for Arcsight

Allow more special characters for Logger Configuration Backup SCP passwords

Convert or consume only specific logs to avro from th-cef

Storage Groups or multiple retentions on vertica /Recon/Investigate

Logger transaction operator - allow sessions and durations to be based on endTime

Increase Logger search limits

Logger email alert customization

Resources

Menu

Popular Tags

Resources