OpenText ArcSight

Add a connector for Quick Heal Seqrite Endpoint Security.

Kedar Mali

Add connector for Quick Heal Seqrite Endpoint security as many of clients in India are using this Antivirus solution hence need connectors or at least parser for this. Seqrite RAW Logs.xlsx
- over 1 year ago
- OpenText ArcSight
- ArcSight Ideas
cron jobs on master node of ArcSight DB

Piotr K

On the primary node of ArcSight DB there have been a number of scripts and corresponding cronjobs (see the list below). The concern is that with all that placed on a single node single point of failure is created. Will multiplication of the cronjobs…
- over 2 years ago
- OpenText ArcSight
- ArcSight Ideas
HPE Secure Encryption strength for Appliance Model

lincoln.thum@e-

G10 Appliance model, and HPE Secure Encryption feature for data at rest encryption, are generally comply with FIPS 140-2 standards, where the encryption standard is based on SHA-256. Request next generation of Logger appliance model should meet "FIPS…
- over 2 years ago
- OpenText ArcSight
- ArcSight Ideas
Cipher strength for Logger data file algorithm

lincoln.thum@e-

Request for encryption of Logger data file support SHA-2 (SHA384) hash algorithm, including the "data validation" feature that could validate the data files with SHA384.
- over 2 years ago
- OpenText ArcSight
- ArcSight Ideas
SNMPv3 (SHA256 and SHA384 with AES256) for G10 appliance

lincoln.thum@e-

Request to support Logger and ArcMC SNMP polling/trap up to SNMPv3 (SHA256 and SHA384 with AES256).
- over 2 years ago
- OpenText ArcSight
- ArcSight Ideas
SNMPv3 for Logger trigger alert - support for SHA-384

lincoln.thum@e-

Request to have SNMPv3 destination to support SHA2 (SHA-384)
- over 2 years ago
- OpenText ArcSight
- ArcSight Ideas
SSL cipher and MAC support for Logger

lincoln.thum@e-

For SSL/TLS CipherSuite/algorithm that is supported in transporting events (Secured SmartMessage) from Connector to Logger. Request for ArcSight Logger to support SHA384, specifically the following Cipher algorithms: ECDHE-ECDSA-AES256-GCM-SHA384…
- over 2 years ago
- OpenText ArcSight
- ArcSight Ideas
ArcSight support to install on the Rocky Linux 8

Eric3

CentOS 8.x will be the end of support this year. Please support the product of ArcSight series can install on the Rocky Linux 8.
- over 3 years ago
- OpenText ArcSight
- ArcSight Ideas
One stop shop support matrix for all products and versions.

Kyle Pearson

It is currently tedious to find out the support for all the various products having to go admin guides for some products and release notes of others especially as the ecosystem continues to grow with the platform, SOAR etc. Can we please get a single…
- over 3 years ago
- OpenText ArcSight
- ArcSight Ideas
LoggerToNNMi Replacement

Timon

Add an integration with Network Node Manager i (NNMi) using the new ArcSight Platform: Currently: Smart Connector --> Logger --> LoggerToNNMi Connector --> NNMi Ideas: Smart Connector --> Transformation Hub --> LoggerToNNMi Connector --> NNMi…
- over 3 years ago
- OpenText ArcSight
- ArcSight Ideas
ArcSight SmartConnector Support for AWS Network Firewall

Bob_Hwang

Dear Team, We need to integrate with AWS Network Firewall logs. Also needed to integrate ArcSight SOAR too. Our customers want our ArcSight to be added to the list above, just like our competitors Splunk and IBM QRadar. https://aws.amazon.com…
- over 3 years ago
- OpenText ArcSight
- ArcSight Ideas
SNMPv3 Privacy Protocol for AES256

lincoln.thum@e-

ArcSight Logger and ArcSight Connector's SNMPv3 for polling and traps only support up to AES128. Purpose : To increase the security level Meeting compliance and hardening standard
- over 3 years ago
- OpenText ArcSight
- ArcSight Ideas
SNMPv3 Authentication Protocol for SHA2

lincoln.thum@e-

ArcSight Logger and ArcSight Connector's SNMPv3 for polling and traps only support up to SHA. Purpose : To increase the security level Meeting compliance and hardening standard
- over 3 years ago
- OpenText ArcSight
- ArcSight Ideas
Add operators "INSUBNET", "IS NULL" and symbol $ in Routing Rules on ArcMC

gordeev_vv

Hello Team, Please add operators "INSUBNET", ENDSWITH/STARTSWITH/CONTAINS "$" and operator "IS" (IS NULL/NOT NULL) in routing rules on ArcMC. I can't filtered machine account (filter ENDSWITH $ not work) and can't filtered correct subnet (filter INSUBNET…
- over 3 years ago
- OpenText ArcSight
- ArcSight Ideas
Simplify upgrade upgrade paths

simon.simcic@sr

Hi, I suggest that you make the upgrade process simpler. If we have a gap between versions, then we have to for Instance - Let's say you're on Logger 6.7. and need to go to 7.1 - That is 4 upgrades. Can you make this process cumulative? That would make…
- over 3 years ago
- OpenText ArcSight
- ArcSight Ideas
CEF Schema Registry

Karl2

Screenshot 2020-12-03 at 12.58.11.png Hi All, The Common Event Format is being used widely by all the ArcSight products but also has been implemented by many other security solutions and offers a fair data quality. ArcSight Customers has made strong…
- over 4 years ago
- OpenText ArcSight
- ArcSight Ideas
ORACLE TCPS Certificate connection on FlexConnector

andrzej.stolars

The Oracle Audit DB is capable of connecting using Secure Connection TCPS to the ORACLE DB, but the FlexConnector does not have that capability.
- over 4 years ago
- OpenText ArcSight
- ArcSight Ideas
Auto-scaling on the cloud of ArcSight products

Bob_Hwang

As far as I know, our ArcSight products cannot be configured for scale up(down)/out(in) on the cloud. So, I would like to request planning for Auto-scaling on the cloud of ArcSight products. AWS and Azure customers are increasing in these days, and…
- over 4 years ago
- OpenText ArcSight
- ArcSight Ideas
Enhance CISCO parsers

mederic.hurier

Hello, Could you please enhance the CISCO parser so they also parse this king of events? <13>Aug 20 09:23:40 srsld201 950440: 1416329: Aug 20 09:23:39.539: %ILPOWER-5-ILPOWER_POWER_DENY: Interface Gi2/0/21: inline power denied. Reason: insufficient…
- over 4 years ago
- OpenText ArcSight
- ArcSight Ideas
Logger email alert customization

simon.simcic@sr

Hi, I would suggest the ability on the customizations over alerts in Logger. Did not try it in version 7, but if you use alerts in Logger and trigger on an event, then the email message contains the entire CEF event, which is not really informative…
- over 4 years ago
- OpenText ArcSight
- ArcSight Ideas
Add black lists in ArcMC monitoring rules

Inby

Hello, everyone. It is possible to add a "white" list in ArcMC monitoring rules, so choose nodes on which this rule will work . But it can be not so good: for example, you add a new connector and should add it to each rule you are using. So it is more…
- over 4 years ago
- OpenText ArcSight
- ArcSight Ideas
Enable Logger/ArcMc to import list of user in CSV format

Aleccese78

Brief Description: add users through csv file in Logger/ArcMc Benefits / Value: to be able to add lists of users in Logger/ArcMc without adding them one-by-one (as actually can be done). That's important because it can happen that customers have to enable…
- over 4 years ago
- OpenText ArcSight
- ArcSight Ideas
Customized system monitoring rules in ArcMC

Inby

Hello everybody. There are system notifications on e-mail in ArcMC about container/connector status: nodes are down nodes are back up I think it would be better to add the ability to customize it, for example, add exclusions for some containers…
- over 4 years ago
- OpenText ArcSight
- ArcSight Ideas
Cannot parser Check Point R80.30 syslog events

mingchung

I want to parse the checkpoint R80.30 events to syslog and I am using Syslog Deamon 7.14.0 and parser 7.14.1 CheckPoint R80.30. But it is not compatible? Can someone help us solve this problem?
- over 4 years ago
- OpenText ArcSight
- ArcSight Ideas

Resources

Learning Services

Partner Programs

Privacy

Compliance

Help

Company

Privacy Policy
Terms of Use
Cookies Preferences

Accessibility
Anti-Slavery Statement

Support
Contact Us

Careers
Code of Business Conduct and Ethics

The opinions expressed above are the personal opinions of the authors, not of OpenText. By using this site, you accept the Terms of Use. Certain versions of content ("Material") accessible here may contain branding from Hewlett-Packard Company (now HP Inc.), Hewlett Packard Enterprise Company, or Micro Focus. As of January 31, 2023, the Material is now offered by OpenText, a separately owned and operated company. Any reference to the HP, Hewlett Packard Enterprise/HPE, and Micro Focus marks is historical in nature and the HP, Hewlett Packard Enterprise/HPE, and Micro Focus marks are the property of their respective owners.