This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

How to setting SmartConnector in Sentinel Env , not in Arcsight

Hi All

   I try to study smartconnector.

When I try to install SmartConnector 8.4.3...it show unsupported platrform.But I test Win2012r2~Win2022...all OS show the same message.

which windows OS that smartconnector 8.4.3 support ?

when I ignore this message to continune install....the global setting...I do not know how to setting when in senitnel Env.(this windows & senitnel are the same LocalLAN subnet...)

Thanks!!

Wencheng

Parents
  • Suggested Answer

    0  

    SmartConnectors collect events from supported devices, normalizes events into the Common Event Format (CEF), and forwards them to Sentinel through the Syslog Connector. The Connector then forwards the events to Universal Common Event Format Collector for parsing.

    You should therefore configure the SmartConnector with a Syslog CEF destination.

    Sentinel does not support Voltage (Format Preserving Encryption) so leave that disabled.

  • 0 in reply to   

    HI   

        so this second screenshot picture that I could keep default...I could just add a digital number as unique ID , other parameter keep default setting then select event source from list (for example , I select VMware web service, proivide ESXi information), then I saw the "CEF syslog"....this is "Only  connector method" For SmartConnect send to sentinel , Correct ?

  • 0   in reply to 

    Correct! The image link you posted is broken though. 

Reply Children
No Data