• All ArcSight ESM Console users can Chat together internally !

    Hi developers This Idea sending here Because the "Idea Page" is disabled! I think if all ArcSight ESM Console users can Chat together internally for any negotiations, that's so useful. the "Cases" resource maybe is handled this application request. BR…
  • Recovery of deleted admin user account

    Hi Community members, I have an urgent query and would appreciate some quick responses. I have accidently deleted another admin user from the system and wanted to know if there is a way to recover the deleted user ? OR atleast a way to recover the deleted…
  • L2-Entity Monitoring - Situational Awareness

    This is the official forum for discussing the ArcSight Activate L2-Entity Monitoring - Situational Awareness package, as described in the Activate Wiki ​
  • L1-Entity Monitoring - Indicators and Warnings

    This is the official forum for discussing the ArcSight Activate L1-Entity Monitoring - Indicators and Warnings package, as described in the Activate Wiki ​
  • Has anyone encountered the "table arc_relationship is full" error when creating new users from the console using v6.5?

    Today I ran into the error, "table arc_relationship is full" when creating a new user. I'm not sure where to begin trouble-shooting this. It's a production SIEM so I have to be careful. ideas?
  • L2-User Monitoring - Situational Awareness

    This is the official forum for discussing the ArcSight Activate L2-User Monitoring - Situational Awareness package, as described in the Activate Wiki .
  • L1-User Monitoring - Indicators and Warnings

    This is the official forum for discussing the ArcSight Activate L1-User Monitoring - Indicators and Warnings package, as described in the Activate Wiki .
  • Error deleting user

    Hi, I just deleted a user without problems, but when I try to delete another one from the same group, I got the following error: There was an error on the manager: For relationship 'Has been created by': User 'admin' does not have read permission to:…
  • Restrict User Access to View only 1 device Group

    In Logger are you able to restrict a user to only view events from 1 particular device group? Fore example I have 20 device groups, and I have a user that only needs to see events for 1 of those device groups. The user will not be allowed to view any…
  • Unlocking Cases for Non-Admin Users

    How can change setting such that non-admin users can unlock incident cases?
  • List of Users within ArcSight ESM for Auditing

    My client is requesting me list of users having access to ESM with read/write access to resources. This is required for auditing, and I am not sure how to get these details. There are some users who havent logged in to ESM, so login/logout details or…
  • Is there an ArcSight report that will show me all my users?

    I need a report that will give me all the information or at least the first and last name of each arcsight user. Anyone know?
  • Experience with Windows Terminal Server and logged-in Users

    Hi guys, Does somebody install a connector on a Windows terminal server to get events like which users are atm logged in and which logged out? Any experience with this?
  • ESM roles

    All, I'm tasked with putting down some roles for use in ESM. Trying to get rbac implemented properly. My question to you is, which roles for users have you defined in your ESM environment? And what permission have you given to them? We would like to get…
  • How to stop users from being able to create cases

    I have a need to create a web only user who can only READ certain info. I am able to do so without problem. I have setup the user in a new user group. That group has inherited only two things from its parent. Those are the ability to R/W on /All Field…
  • Privileged Account Risk Management - Need Help with ArcSight integration?

    We're happy to discuss the topic of Privileged Risk Management - methodology and relevance to the ArcSight Platform.