arabic language not parsing

Question

I have smartconnector type (exchange_message_tracking_log_multiple_server_file) and some emails in arabic so when i recieve this logs in logger or esm i found such as this msg=&Ugrave;&hellip;&Oslash;&plusmn;&Ugrave;&fnof;&Oslash;&sup2;&Ugrave;&bdquo;&Oslash;&sect;&Oslash;&ordf;&Oslash;&micro;&Oslash;&sect;&Ugrave;&bdquo; &Oslash;&sect;&Ugrave;&bdquo;&Ugrave;&hellip;&Ugrave;&circ;&Oslash;&shy;&Oslash;&macr; &Ugrave;&dagger;&Ugrave;&hellip;&Ugrave;&circ;&Oslash;&deg;&Oslash;&not; &Ugrave;&fnof;&Oslash;&plusmn;&Oslash;&sect;&Oslash;&sup3;&Oslash;&copy; (&Oslash;&reg;&Oslash;&macr;&Ugrave;&hellip;&Oslash;&sect;&Oslash;&ordf; &Oslash;&ordf;&Ugrave;&sbquo;&Ugrave;&dagger;&Ugrave;&Scaron;&Oslash;&copy; &Ugrave;&hellip;&Oslash;&sup1;&Ugrave;&bdquo;&Ugrave;&circ;&Ugrave;&hellip;&Oslash;&sect;&Oslash;&ordf;), how can i fix this issue.

Mladen Kujundzic · Answer

Hello Mohamed, 
 
 Can you confirm that events are parsed and only some ArcSight fields are showing this encoding issue? 
 If events are parsed correctly, I would suggest you put these additional parameters into SmartConnector agent.wrapper.conf file: 
 wrapper.java.additional.xx=-Duser.language=yy 
 wrapper.java.additional.xx=-Duser.region=YY 
 
 where xx is the next available index of what you have for wrapper.java.additional parameter and yy and YY are from the list you can find here: 
 https://www.microfocus.com/documentation/arcsight/arcsight-smartconnectors-8.4/LocalesAndEncodings/#LocalesAndEncodings/List_of_possible_values.htm?TocPath=Installing%2520the%2520Language%2520Update%257C_____1 
 
 An example for Kuwait: 
 wrapper.java.additional.13=-Duser.language=ar 
 wrapper.java.additional.14=-Duser.language=KW 
 
 Save the file and restart the connector service. 
 
 if this doesn't help, please open a support ticket. 
 
 Mladen

Menu

ArcSight Discussions

arabic language not parsing

Suggested Answer

Resources