Accepted Solutions in ArcSight discussion board · July 24, 2019 Note: This is not an official...

July 24, 2019 Note: This is not an official Micro Focus document.

Accepted Solutions in ArcSight discussion board Topics URL Author Publish

Date How to define deviceSeverity on Flex id-database Connector?

https://community.softwaregrp.com/t5/ArcSight-User-Discussions/How-to-define-deviceSeverity-on-Flex-id-database-Connector/m-p/1510426#M2293

zargaran 2/18/2017

Microsoft ATA integration guide https://community.softwaregrp.com/t5/ArcSight-User-Discussions/Microsoft-ATA-integration-guide/m-p/1552614#M19448

akash1609 2/13/2017

Apache Struts CVE-2017-5638 - ArcSight ESM

https://community.microfocus.com/t5/ArcSight-User-Discussions/Apache-Struts-CVE-2017-5638-ArcSight-ESM/m-p/1503769#M811

slider8p1 4/10/2017

Action Connector Error https://community.microfocus.com/t5/ArcSight-User-Discussions/Action-Connector-Error/m-p/1592433#M1695

vigneshwar 5/30/2017

query.limit config option for db based flexconnectors

https://community.microfocus.com/t5/ArcSight-User-Discussions/query-limit-config-option-for-db-based-flexconnectors/m-p/1593385#M1706

andrew.dalbor 6/6/2017

Delete User group named Administrator

https://community.microfocus.com/t5/ArcSight-User-Discussions/Delete-User-group-named-Administrator/m-p/1594103#M1714

andrea.mazzetti 6/12/2017


Restarting ArcMC container processes from the command line

https://community.microfocus.com/t5/ArcSight-User-Discussions/Restarting-ArcMC-container-processes-from-the-command-line/m-p/1597483#M1779

klr01 7/5/2017

event with ActiveList data in it https://community.microfocus.com/t5/ArcSight-User-Discussions/event-with-ActiveList-data-in-it/m-p/1601712#M1911

hidekikonno 7/28/2017

Error with map.0.properties file https://community.microfocus.com/t5/ArcSight-User-Discussions/Error-with-map-0-properties-file/m-p/1604343#M1925

hima.cholakurus 8/1/2017

Why the 700+ email updates to the product documentation?

https://community.microfocus.com/t5/ArcSight-User-Discussions/Why-the-700-email-updates-to-the-product-documentation/m-p/1611120#M1990

steve-m 8/25/2017

Archive report generation failed: Error reading file 'UNKNOWN' (Errcode: 9)

https://community.microfocus.com/t5/ArcSight-User-Discussions/Archive-report-generation-failed-Error-reading-file-UNKNOWN/m-p/1612049#M2004

folender 8/31/2017

September 27th, 2017! Online Expert Day ArcSight!

https://community.microfocus.com/t5/ArcSight-User-Discussions/September-27th-2017-Online-Expert-Day-ArcSight/m-p/1613054#M2015

dessybv 9/8/2017

Logger - peer search by default? https://community.microfocus.com/t5/ArcSight-User-Discussions/Logger-peer-search-by-default/m-p/1613188#M2016

ondrej.krabec@h 9/11/2017


Rsyslog TLS and Syslog_ng connectpor

https://community.microfocus.com/t5/ArcSight-User-Discussions/Rsyslog-TLS-and-Syslog-ng-connectpor/m-p/1615059#M2092

angelo.cappelli 9/21/2017

Deleting user account from ESM - What happens to user owned content ?

https://community.microfocus.com/t5/ArcSight-User-Discussions/Deleting-user-account-from-ESM-What-happens-to-user-owned/m-p/1615411#M2096

slider8p1 9/25/2017

Facing Arcsight smart connector down AOH for sourcefireAPI config (estreamer)

https://community.softwaregrp.com/t5/ArcSight- User-Discussions/Facing-Arcsight-smartconnector-down-AOH-for-sourcefireAPI/m- p/1620968#M2796

AarushJ 11/3/2017

Windows Connector not pulling events from a server

https://community.softwaregrp.com/t5/ArcSight-User-Discussions/Windows-Connector-not-pulling-events-from-a-server/m-p/1623969#M41785

Infosec 11/27/2017

Estreamer Smart Connector https://community.microfocus.com/t5/ArcSight-User-Discussions/Estreamer-Smart-Connector/m-p/1627604#M38626

bob_deerinwater 12/28/2017

Search Group Filters seem to be missing in Logger Version 6.5.1.8154.0

https://community.softwaregrp.com/t5/ArcSight- User-Discussions/Search-Group-Filters-seem-to- be-missing-in-Logger-Version-6-5-1/m- p/1631329#M40884

dominikn1 2/2/2018

/opt/arcsight/logger/data/logge r vs. /opt/arcsight/logger/data/archiv es/

https://community.softwaregrp.com/t5/ArcSight- User-Discussions/opt-arcsight-logger-data- logger-vs-opt-arcsight-logger-data/m- p/1631659#M40950

markk308 2/5/2018


How to add a value from Active List to Active Chanel

https://community.microfocus.com/t5/ArcSight-User-Discussions/How-to-add-a-value-from-Active-List-to-Active-Chanel/m-p/1632807#M41091

Artem 2/13/2018

ArcSight Event Broker 2.11 and RHEL 7.4

https://community.softwaregrp.com/t5/ArcSight- User-Discussions/ArcSight-Event-Broker-2-11- and-RHEL-7-4/m-p/1636342#M41446

zinin 3/7/2018

Network Model Greyed Out https://community.softwaregrp.com/t5/ArcSight-User-Discussions/Network-Model-Greyed-Out/m-p/1641670#M42253

Infosec 4/13/2018

Hi Guys,What are the standard baseline/key items required in a log for SIEM? e.g. time, date, id..

https://community.softwaregrp.com/t5/ArcSight- User-Discussions/Hi-Guys-What-are-the- standard-baseline-key-items-required-in-a/m- p/1644228#M42468

StarBoy 4/30/2018

hprof files filling up my drive space

https://community.softwaregrp.com/t5/ArcSight- User-Discussions/hprof-files-filling-up-my-drive- space/m-p/1644253#M42470

MR1 4/30/2018


win32 was unexpected at this time error when trying to install SmartConnector

https://community.softwaregrp.com/t5/ArcSight- User-Discussions/win32-was-unexpected-at-this- time-error-when-trying-to-install/m- p/1644654#M42489

reswob4 5/2/2018

Port 1433 is unidirectional or bidirectional ?

https://community.softwaregrp.com/t5/ArcSight- User-Discussions/Port-1433-is-unidirectional-or- bidirectional/m-p/1644748#M42494

libinkallingal 5/3/2018

Doing Checkpoint R80.10 the right way?

https://community.softwaregrp.com/t5/ArcSight- User-Discussions/Doing-Checkpoint-R80-10-the- right-way/m-p/1644895#M42503

Marius 5/3/2018

install failed: Active List capacity cannot be greater than 1000000 (List Name...

https://community.softwaregrp.com/t5/ArcSight- User-Discussions/install-failed-Active-List- capacity-cannot-be-greater-than/m- p/1645018#M42511

PeSeKa 5/4/2018

Use of Active List for matching IDs

https://community.softwaregrp.com/t5/ArcSight- User-Discussions/Use-of-Active-List-for- matching-IDs/m-p/1645181#M42530

rgrace1 5/7/2018

ESM 7.0 distributed correlation vs ESM HA

https://community.softwaregrp.com/t5/ArcSight- User-Discussions/ESM-7-0-distributed- correlation-vs-ESM-HA/m-p/1645415#M42552

chansu 5/8/2018

problem installing SmartConnector for ArcSight CEF Cisco FireSIGHT Syslog.

https://community.softwaregrp.com/t5/ArcSight- User-Discussions/problem-installing- SmartConnector-for-ArcSight-CEF-Cisco/m- p/1645618#M42570

mennab1 5/9/2018

Has anyone managing Palo Alto logs been able to remove quotes around Palo Alto URL's?

https://community.softwaregrp.com/t5/ArcSight- User-Discussions/Has-anyone-managing-Palo- Alto-logs-been-able-to-remove-quotes/m- p/1646192#M42611

markk308 5/11/2018


Kafka scheduler is getting stuck and needs restart once in 3-4 days

https://community.softwaregrp.com/t5/ArcSight- User-Discussions/Kafka-scheduler-is-getting- stuck-and-needs-restart-once-in-3-4/m- p/1646347#M42628

atulsm 5/14/2018

Query regarding FlexDev datatype

https://community.softwaregrp.com/t5/ArcSight- User-Discussions/Query-regarding-FlexDev- datatype/m-p/1646388#M42632

sandeeprk1 5/14/2018

Difference between a Smart Connector and Smart Collector

https://community.softwaregrp.com/t5/ArcSight- User-Discussions/Difference-between-a-Smart- Connector-and-Smart-Collector/m- p/1646396#M42633

atulsm 5/14/2018

Logger Internal Event Device https://community.softwaregrp.com/t5/ArcSight- User-Discussions/Logger-Internal-Event- Device/m-p/1646704#M42665

PeSeKa 5/15/2018

Schedule reports Templates https://community.softwaregrp.com/t5/ArcSight- User-Discussions/Schedule-reports- Templates/m-p/1646736#M42668

TNT 5/15/2018

Log rotation - the wincagent.log file (winc smartconnector)

https://community.softwaregrp.com/t5/ArcSight- User-Discussions/Log-rotation-the-wincagent- log-file-winc-smartconnector/m- p/1647347#M42718

fjdoming 5/17/2018

Sophos Reverse Proxy send late events logs

https://community.softwaregrp.com/t5/ArcSight- User-Discussions/Sophos-Reverse-Proxy-send- late-events-logs/m-p/1647623#M42738

PeSeKa 5/18/2018

How to install the connector in Windows using CLI.

https://community.softwaregrp.com/t5/ArcSight- User-Discussions/How-to-install-the-connector- in-Windows-using-CLI/m-p/1647637#M42740

SaiS 5/18/2018

Does the new Smart Connector 7.8.0 for Windows

https://community.softwaregrp.com/t5/ArcSight- User-Discussions/Does-the-new-Smart-

philip.richards1 5/21/2018


Event Logs work with SMBv2 or SMBv3?

Connector-7-8-0-for-Windows-Event-Logs- work/m-p/1647770#M42757

How to capture a part of string within an ESM field?

https://community.softwaregrp.com/t5/ArcSight- User-Discussions/How-to-capture-a-part-of- string-within-an-ESM-field/m- p/1647776#M42759

michael_hoang 5/21/2018

Can someone please explain to me if _queue files in agentdata is supposed to be there?

https://community.softwaregrp.com/t5/ArcSight- User-Discussions/Can-someone-please-explain- to-me-if-queue-files-in-agentdata-is/m- p/1647852#M42770

Marius 5/21/2018

Enable Device Status Monitoring

https://community.softwaregrp.com/t5/ArcSight- User-Discussions/Enable-Device-Status- Monitoring/m-p/1648101#M42786

PeSeKa 5/22/2018

Moving From Appliance to Virtual

https://community.softwaregrp.com/t5/ArcSight- User-Discussions/Moving-From-Appliance-to- Virtual/m-p/1648374#M42806

Oliver843 5/23/2018

How to monitor connector status without registering to ESM

https://community.softwaregrp.com/t5/ArcSight- User-Discussions/How-to-monitor-connector- status-without-registering-to-ESM/m- p/1648460#M42810

mr_ergene 5/23/2018

Need help in reading logs from File based flex

https://community.softwaregrp.com/t5/ArcSight- User-Discussions/Need-help-in-reading-logs- from-File-based-flex/m-p/1648675#M42821

santhoshpsd 5/24/2018

Connector Down monitoring Rules in ArcMC 2.71

https://community.softwaregrp.com/t5/ArcSight- User-Discussions/Connector-Down-monitoring- Rules-in-ArcMC-2-71/m-p/1649341#M42881

chansu 5/29/2018

Arcsight Rules Example https://community.softwaregrp.com/t5/ArcSight- User-Discussions/Arcsight-Rules-Example/m- p/1649513#M42896

Bob6 5/30/2018 0:17


Key Value Parser Not Extracting Key Values

https://community.softwaregrp.com/t5/ArcSight- User-Discussions/Key-Value-Parser-Not- Extracting-Key-Values/m-p/1649720#M42905

zonki 5/30/2018 16:19

The initialization of Logger software was unsuccessful.

https://community.softwaregrp.com/t5/ArcSight- User-Discussions/The-initialization-of-Logger- software-was-unsuccessful/m- p/1649954#M42915

ShayWeizmanFG 5/31/2018 9:24

How do you manually archive on ArcSight Logger v 6.0?

https://community.softwaregrp.com/t5/ArcSight- User-Discussions/How-do-you-manually-archive- on-ArcSight-Logger-v-6-0/m-p/1650014#M42920

mboucher31 5/31/2018 12:35

Arcsight Console https://community.softwaregrp.com/t5/ArcSight- User-Discussions/Arcsight-Console/m- p/1650060#M42925

Adrian Furman 5/31/2018 15:49

Out of hours login variable logic

https://community.softwaregrp.com/t5/ArcSight- User-Discussions/Out-of-hours-login-variable- logic/m-p/1650193#M42931

Oliver843 6/1/2018 13:08

ArcSight 2.8 Install failure https://community.softwaregrp.com/t5/ArcSight- User-Discussions/ArcSight-2-8-Install-failure/m- p/1650213#M42933

SIEMDF 6/1/2018 16:01

Check Point OPSEC character encoding issue

https://community.softwaregrp.com/t5/ArcSight- User-Discussions/Check-Point-OPSEC- character-encoding-issue/m-p/1650356#M42953

mr_ergene 6/4/2018 11:16

Connector not running on logger 6.0 appliance

https://community.softwaregrp.com/t5/ArcSight- User-Discussions/Connector-not-running-on- logger-6-0-appliance/m-p/1650636#M42967

mr_ergene 6/5/2018 13:17

copying events between two Loggers

https://community.softwaregrp.com/t5/ArcSight- User-Discussions/copying-events-between-two- Loggers/m-p/1650930#M42983

leda65 6/6/2018 19:56


On CentOS, runagentsetup.sh won't start

https://community.softwaregrp.com/t5/ArcSight- User-Discussions/On-CentOS-runagentsetup- sh-won-t-start/m-p/1650931#M42984

reswob4 6/6/2018 19:56

Processing commands against multiple connectors

https://community.softwaregrp.com/t5/ArcSight- User-Discussions/Processing-commands- against-multiple-connectors/m- p/1651023#M42995

derek_bartram 6/7/2018 9:49

Is anyone has a documentation on how to migrate Event Archive data to a different NFS location/path?

https://community.softwaregrp.com/t5/ArcSight- User-Discussions/Is-anyone-has-a- documentation-on-how-to-migrate-Event- Archive/m-p/1651195#M43003

rodrigc3 6/8/2018 6:21

ArcMC Installation Error !!! https://community.softwaregrp.com/t5/ArcSight- User-Discussions/ArcMC-Installation-Error/m- p/1651403#M43012

zargaran 6/10/2018 11:50

Source Configuration and smart/flex connector for...?

https://community.softwaregrp.com/t5/ArcSight- User-Discussions/Source-Configuration-and- smart-flex-connector-for/m-p/1651508#M43029

PeSeKa 6/11/2018 13:32

Just a sad sigh: "no more unmasked parsers for overrides"

https://community.softwaregrp.com/t5/ArcSight- User-Discussions/Just-a-sad-sigh-quot-no-more- unmasked-parsers-for-overrides-quot/m- p/1652154#M43076

[email protected] 6/14/2018 11:44

logger report query with lookup list

https://community.softwaregrp.com/t5/ArcSight- User-Discussions/logger-report-query-with- lookup-list/m-p/1652534#M43091

jaime-ko 6/18/2018 3:31

How to Create notification template in ArcSight ESM ???

https://community.softwaregrp.com/t5/ArcSight- User-Discussions/How-to-Create-notification- template-in-ArcSight-ESM/m- p/1652543#M43093

zargaran 6/18/2018 6:08

mailto:[email protected]


Oracle Application Server... https://community.softwaregrp.com/t5/ArcSight- User-Discussions/Oracle-Application-Server/m- p/1652637#M43110

PeSeKa 6/18/2018 13:05

Raw Event from connector on logger?

https://community.softwaregrp.com/t5/ArcSight- User-Discussions/Raw-Event-from-connector- on-logger/m-p/1652653#M43112

PeSeKa 6/18/2018 14:36

Timebased flexconnector only collects the first event

https://community.softwaregrp.com/t5/ArcSight- User-Discussions/Timebased-flexconnector- only-collects-the-first-event/m- p/1652798#M43127

Per Bejder 6/19/2018 10:17

Cisco ACS/Cisco Command parsing issue

https://community.softwaregrp.com/t5/ArcSight- User-Discussions/Cisco-ACS-Cisco-Command- parsing-issue/m-p/1652888#M43132

jeburkes76 6/19/2018 17:21

Syslog_NG Daemon TLS Keystore Password

https://community.softwaregrp.com/t5/ArcSight- User-Discussions/Syslog-NG-Daemon-TLS- Keystore-Password/m-p/1653074#M43144

andrew.dalbor 6/20/2018 12:59

Connector Properties Override Version Mismatch

https://community.softwaregrp.com/t5/ArcSight- User-Discussions/Connector-Properties- Override-Version-Mismatch/m- p/1653122#M43149

randallpaige 6/20/2018 17:20

Close service request on the support wbesite

https://community.softwaregrp.com/t5/ArcSight- User-Discussions/Close-service-request-on-the- support-wbesite/m-p/1653243#M43154

PeSeKa 6/21/2018 10:07

Backup logger data https://community.softwaregrp.com/t5/ArcSight- User-Discussions/Backup-logger-data/m- p/1653671#M43195

PeSeKa 6/25/2018 7:56

Alternative Connectors that do not use any SMB protocol

https://community.softwaregrp.com/t5/ArcSight- User-Discussions/Alternative-Connectors-that- do-not-use-any-SMB-protocol/m- p/1653862#M43200

fabian.zambrano 6/25/2018 15:36


The Common Event Format Configuration Guide for HP TippingPoint Next Generation Firewall

https://community.softwaregrp.com/t5/ArcSight- User-Discussions/The-Common-Event-Format- Configuration-Guide-for-HP-TippingPoint/m- p/1653939#M43206

Tom Fillmore 6/25/2018 18:57

ArcMC thinks logger is down https://community.softwaregrp.com/t5/ArcSight- User-Discussions/ArcMC-thinks-logger-is- down/m-p/1654063#M43216

Oliver843 6/26/2018 9:40

How to view/edit the MS SQL query used for an ArcSight Connector?

https://community.softwaregrp.com/t5/ArcSight- User-Discussions/How-to-view-edit-the-MS- SQL-query-used-for-an-ArcSight-Connector/m- p/1654114#M43222

reswob4 6/26/2018 12:55

Install ESM 6.11 Error...HELP! https://community.softwaregrp.com/t5/ArcSight- User-Discussions/Install-ESM-6-11-Error- HELP/m-p/1654162#M43228

PeSeKa 6/26/2018 15:27

Need information about Arcsight ESM HA Module

https://community.softwaregrp.com/t5/ArcSight- User-Discussions/Need-information-about- Arcsight-ESM-HA-Module/m- p/1654367#M43230

prodige 6/27/2018 8:38

How to map the result of math operations to a string?

https://community.softwaregrp.com/t5/ArcSight- User-Discussions/How-to-map-the-result-of- math-operations-to-a-string/m- p/1654407#M43237

Chawicha 6/27/2018 12:15

Help extracting info from event field using Local Variables

https://community.softwaregrp.com/t5/ArcSight- User-Discussions/Help-extracting-info-from- event-field-using-Local-Variables/m- p/1654497#M43248

MJS613 6/27/2018 18:55

Logger_httpd unavailable https://community.softwaregrp.com/t5/ArcSight- User-Discussions/Logger-httpd-unavailable/m- p/1654668#M43267

bluarancio1 6/28/2018 16:22


Differences between Framework and Parser

https://community.softwaregrp.com/t5/ArcSight- User-Discussions/Differences-between- Framework-and-Parser/m-p/1654764#M43271

kenglim 6/29/2018 3:45

Filtering out events on SmartConnector based on multiple conditions

https://community.softwaregrp.com/t5/ArcSight- User-Discussions/Filtering-out-events-on- SmartConnector-based-on-multiple/m- p/1654824#M43273

Infosec 6/29/2018 9:38

Best Type Of Hard Drive For SW Logger

https://community.softwaregrp.com/t5/ArcSight- User-Discussions/Best-Type-Of-Hard-Drive-For- SW-Logger/m-p/1655065#M43290

Oliver843 7/2/2018 9:49

Connector for Shibboleth https://community.softwaregrp.com/t5/ArcSight- User-Discussions/Connector-for-Shibboleth/m- p/1655066#M43291

PeSeKa 7/2/2018 9:53

Port forwarding for the Event Broker Manager?

https://community.softwaregrp.com/t5/ArcSight- User-Discussions/Port-forwarding-for-the-Event- Broker-Manager/m-p/1655189#M43297

zinin 7/2/2018 17:27

GC Allocation Failure messages in Connector agent.wrapper.out log file

https://community.softwaregrp.com/t5/ArcSight- User-Discussions/GC-Allocation-Failure- messages-in-Connector-agent-wrapper-out/m- p/1655314#M43311

cyberie 7/3/2018 13:06

ArcSight Activate Base https://community.softwaregrp.com/t5/ArcSight- User-Discussions/ArcSight-Activate-Base/m- p/1655426#M43317

aquillius.t@net 7/4/2018 2:53

Linux Integration to ArcSight https://community.softwaregrp.com/t5/ArcSight- User-Discussions/Linux-Integration-to- ArcSight/m-p/1655487#M43322

joshguillarte 7/4/2018 8:40

Software Logger Firewall https://community.softwaregrp.com/t5/ArcSight- User-Discussions/Software-Logger-Firewall/m- p/1655518#M43330

Oliver843 7/4/2018 10:07


ArcSight console - How to retrieve the Event throughput log

https://community.softwaregrp.com/t5/ArcSight- User-Discussions/ArcSight-console-How-to- retrieve-the-Event-throughput-log/m-

choy 7/5/2018 7:54

Token masking https://community.softwaregrp.com/t5/ArcSight- User-Discussions/Token-masking/m- p/1656313#M43394

sharan Bhat 7/10/2018 8:46

ESM 6.11 all service unavailable

https://community.softwaregrp.com/t5/ArcSight- User-Discussions/ESM-6-11-all-service- unavailable/m-p/1656365#M43399

PeSeKa 7/10/2018 13:15

Problems with Upgrade ESM 7.0

https://community.softwaregrp.com/t5/ArcSight- User-Discussions/Problems-with-Upgrade-ESM- 7-0/m-p/1656388#M43403

PeSeKa 7/10/2018 14:54

Logger Upgrade to 6.2 https://community.softwaregrp.com/t5/ArcSight- User-Discussions/Logger-Upgrade-to-6-2/m- p/1656505#M43411


How activate my restored events (ESM 6.8)

https://community.softwaregrp.com/t5/ArcSight- User-Discussions/How-activate-my-restored- events-ESM-6-8/m-p/1656530#M43421

Fred Henrique 7/11/2018 12:17

Renew ESM SSL Certificate using pfx file (not using CSR)

https://community.softwaregrp.com/t5/ArcSight- User-Discussions/Renew-ESM-SSL-Certificate- using-pfx-file-not-using-CSR/m- p/1656542#M43422

mr_ergene 7/11/2018 13:35

ArcMCs Monitoring Breach Rules: Select specific nodes

https://community.softwaregrp.com/t5/ArcSight- User-Discussions/ArcMCs-Monitoring-Breach- Rules-Select-specific-nodes/m- p/1656682#M43440

dominikn1 7/12/2018 11:55

ID based database flex connector?

https://community.softwaregrp.com/t5/ArcSight- User-Discussions/ID-based-database-flexconnector/m-p/1656770#M43459

kotireddy 7/13/2018 6:07


Hi Guys,Is there a plan/procedure/framework for asset classification?

https://community.softwaregrp.com/t5/ArcSight- User-Discussions/Hi-Guys-Is-there-a-plan- procedure-framework-for-asset/m-

StarBoy 7/13/2018 6:20

Base Event Values in Report Template using Velocity

https://community.microfocus.com/t5/ArcSight-User-Discussions/Base-Event-Values-in-Report-Template-using-Velocity-Variables/m-

kartronix

7/13/2018 6:10

SmartConnector 7.9 Checkpoint Support

https://community.softwaregrp.com/t5/ArcSight- User-Discussions/SmartConnector-7-9- Checkpoint-Support/m-p/1657074#M43565

yakupisler 7/16/2018 9:04

SmartConnector 7.9. and Checkpoint-OPSEC

https://community.softwaregrp.com/t5/ArcSight- User-Discussions/SmartConnector-7-9-and- Checkpoint-OPSEC/m-p/1657075#M43490

yakupisler 7/16/2018 9:08

Custom Windows Event Log Parser (PowerShell Command Line Auditing)

https://community.softwaregrp.com/t5/ArcSight- User-Discussions/Custom-Windows-Event-Log- Parser-PowerShell-Command-Line-Auditing/m- p/1657666#M43541

mr_ergene 7/18/2018 11:09

manager service no start after certificate update

https://community.softwaregrp.com/t5/ArcSight- User-Discussions/manager-service-no-start- after-certificate-update/m-p/1657869#M43584

GySgtMark 7/19/2018 10:38

Understanding ESM API documentation

https://community.softwaregrp.com/t5/ArcSight- User-Discussions/Understanding-ESM-API- documentation/m-p/1657890#M43588

dfc 7/19/2018 12:03

AWS CloudTrail - Multi-tenant https://community.softwaregrp.com/t5/ArcSight- User-Discussions/AWS-CloudTrail-Multi- tenant/m-p/1657933#M43594

jgrayson 7/19/2018 14:54

flex Connector regexToken https://community.softwaregrp.com/t5/ArcSight- User-Discussions/flex-Connector-regexToken/m- p/1659777#M43800

BTO 8/1/2018 13:15


Flex Connector rotationscheme=Index not working for me.

https://community.softwaregrp.com/t5/ArcSight- User-Discussions/Flex-Connector- rotationscheme-Index-not-working-for-me/m- p/1659837#M43805

Diana 8/1/2018 20:38

Attacker Latitude/Longitude from base event does not carry over to correlated event

https://community.softwaregrp.com/t5/ArcSight- User-Discussions/Attacker-Latitude-Longitude- from-base-event-does-not-carry-over/m- p/1660297#M43853

radial1 8/6/2018 14:30

Hi..i have a juniper firewall for which i want to install a connector for traffic logs..

https://community.softwaregrp.com/t5/ArcSight- User-Discussions/Hi-i-have-a-juniper-firewall-for- which-i-want-to-install-a/m-p/1660355#M43861

Somnath 8/7/2018 7:18

arcsight-taxii-client Python error - AttributeError: 'list' object has no attribute 'split'

https://community.softwaregrp.com/t5/ArcSight- User-Discussions/arcsight-taxii-client-Python- error-AttributeError-list-object/m- p/1660462#M43872

Stephen Kreusch 8/7/2018 15:44

Palo Alto event not being Parsed correctly

https://community.softwaregrp.com/t5/ArcSight- User-Discussions/Palo-Alto-event-not-being- Parsed-correctly/m-p/1660759#M43900

PeSeKa 8/9/2018 12:12

Arcsight Logger 6.40 license installation from command line

https://community.softwaregrp.com/t5/ArcSight- User-Discussions/Arcsight-Logger-6-40-license- installation-from-command-line/m- p/1660870#M43907

bharat_karkera 8/10/2018 6:42

Windows Event Log Connector at Centos 7 - error

https://community.softwaregrp.com/t5/ArcSight- User-Discussions/Windows-Event-Log- Connector-at-Centos-7-error/m- p/1661173#M43933

JanSevela 8/13/2018 12:55

On windows platform, send the logs to logger, any solution is suggested?

https://community.softwaregrp.com/t5/ArcSight- User-Discussions/On-windows-platform-send- the-logs-to-logger-any-solution-is/m- p/1661188#M43935

emily_wang88 8/13/2018 13:30


Browser hangs when searching events in loger

https://community.softwaregrp.com/t5/ArcSight- User-Discussions/Browser-hangs-when- searching-events-in-loger/m-p/1661322#M43947

mr_ergene 8/14/2018

Rule to trigger when 2 events don't happen within a time frame

https://community.softwaregrp.com/t5/ArcSight- User-Discussions/Rule-to-trigger-when-2-events- don-t-happen-within-a-time-frame/m- p/1661369#M43953

MJS613 8/14/2018

How to check if the device is supported by smart connector or not

https://community.softwaregrp.com/t5/ArcSight- User-Discussions/How-to-check-if-the-device-is- supported-by-smart-connector-or/m- p/1661381#M43955

Somnath 8/14/2018

WINC - Security Parser Override (4720, 4738, 4741, 4742)

https://community.softwaregrp.com/t5/ArcSight- User-Discussions/WINC-Security-Parser- Override-4720-4738-4741-4742/m- p/1661424#M43965

StevenD 8/14/2018 16:15

active channel logs situations https://community.softwaregrp.com/t5/ArcSight- User-Discussions/active-channel-logs- situations/m-p/1661806#M43987

babak_1353 8/16/2018 15:01

SSL: Possible OpenSSL Use After Free Vulnerability (CVE- 2016-6309)

https://community.softwaregrp.com/t5/ArcSight- User-Discussions/SSL-Possible-OpenSSL-Use- After-Free-Vulnerability-CVE-2016-6309/m- p/1662241#M44016

latunde 8/20/2018 16:07

Multiple Values in E-mail Notification from Rule : Unique Aggreagtion

https://community.softwaregrp.com/t5/ArcSight- User-Discussions/Multiple-Values-in-E-mail- Notification-from-Rule-Unique/m- p/1662258#M44021

kartronix 8/20/2018 18:29

Hi Techies, I'm looking for connector and process for integrating MDM - Mobile iron to Arcsight?

https://community.softwaregrp.com/t5/ArcSight- User-Discussions/Hi-Techies-I-m-looking-for- connector-and-process-for-integrating/m- p/1662597#M44043

AarushJ 8/22/2018 8:44


After Hours Filter https://community.softwaregrp.com/t5/ArcSight- User-Discussions/After-Hours-Filter/m- p/1662732#M44051

JAllen1 8/22/2018 20:38

Advanced multiline parsing text log with FlexConnector

https://community.softwaregrp.com/t5/ArcSight- User-Discussions/Advanced-multiline-parsing- text-log-with-FlexConnector/m- p/1663232#M44083

alexeynl 8/27/2018 12:33

ArcMc not showing devices

https://community.microfocus.com/t5/ArcSight-User-Discussions/ArcMc-not-showing-devices/m-p/1663234#M44085

Miroslav Marcisin

8/27/2018 12:48

ESM archive/imports directory https://community.softwaregrp.com/t5/ArcSight- User-Discussions/ESM-archive-imports- directory/m-p/1663494#M44122

cameronhunter 8/28/2018 17:19

ArcSight Connector and source log format

https://community.softwaregrp.com/t5/ArcSight- User-Discussions/ArcSight-Connector-and- source-log-format/m-p/1663602#M44134

PeSeKa 8/29/2018 8:32

web page esm session time out

https://community.softwaregrp.com/t5/ArcSight- User-Discussions/web-page-esm-session-timeout/m-p/1663776#M44152

PeSeKa 8/30/2018 9:25

Taxii client for Arcsight- problem with polling from ibm xforce

https://community.softwaregrp.com/t5/ArcSight- User-Discussions/Taxii-client-for-Arcsight- problem-with-polling-from-ibm-xforce/m- p/1664078#M44168

Sethi90 9/1/2018 10:22

Default Storage group https://community.softwaregrp.com/t5/ArcSight- User-Discussions/Default-Storage-group/m- p/1664231#M44182

seguranca1 9/3/2018 12:15

ESM HA configuration https://community.softwaregrp.com/t5/ArcSight- User-Discussions/ESM-HA-configuration/m- p/1664297#M44187

sanj1 9/4/2018 6:17


How to Test ESM HA Failover https://community.softwaregrp.com/t5/ArcSight- User-Discussions/How-to-Test-ESM-HA- Failover/m-p/1664781#M44232

mr_ergene 9/6/2018 11:57

How configure Hp OpenVMS for getting logs to a file or to a remote location for ArcSight.?

https://community.softwaregrp.com/t5/ArcSight- User-Discussions/How-configure-Hp-OpenVMS- for-getting-logs-to-a-file-or-to-a/m- p/1665213#M44254

AarushJ 9/10/2018 8:27

Recovery of deleted admin user account

https://community.softwaregrp.com/t5/ArcSight- User-Discussions/Recovery-of-deleted-admin- user-account/m-p/1665283#M44259

udroid 9/10/2018 13:00

Multiple source IP Address connector

https://community.softwaregrp.com/t5/ArcSight- User-Discussions/Multiple-source-IP-Address- connector/m-p/1665421#M44274

PeSeKa 9/11/2018 8:38

ArcSight ESM 6.11, Brain dumps or Question Bank

https://community.softwaregrp.com/t5/ArcSight- User-Discussions/ArcSight-ESM-6-11-Brain- dumps-or-Question-Bank/m-p/1665949#M44308

parvezg 9/13/2018 19:12

ConnApp - ArcMC license issue

https://community.softwaregrp.com/t5/ArcSight- User-Discussions/ConnApp-ArcMC-license- issue/m-p/1666599#M44343

james.hemingway 9/19/2018 11:35

Can anyone please provide "ArcSight Logger Data Migration Guide 6.6.1.8214.0".

https://community.softwaregrp.com/t5/ArcSight- User-Discussions/Can-anyone-please-provide- quot-ArcSight-Logger-Data-Migration/m- p/1666813#M44361

Rohan Sikri 9/20/2018 13:03

Any way to reduce the size of events?

https://community.softwaregrp.com/t5/ArcSight- User-Discussions/Any-way-to-reduce-the-size- of-events/m-p/1667140#M44378

99 9/24/2018 9:47

CounterACT (Action) Connector Parsing Issue

https://community.softwaregrp.com/t5/ArcSight- User-Discussions/CounterACT-Action- Connector-Parsing-Issue/m-p/1667190#M44391

jeburkes76 9/24/2018 13:52


Smart Connector Server Installation

https://community.softwaregrp.com/t5/ArcSight- User-Discussions/Smart-Connector-Server- Installation/m-p/1667338#M44405

pskimb 9/25/2018 9:02

ArcSight ESM Upgrade https://community.softwaregrp.com/t5/ArcSight- User-Discussions/ArcSight-ESM-Upgrade/m- p/1667621#M44437

BTO 9/26/2018 12:14

How much time it takes to Setup a new Software Logger in VM? Integrate ArcMc & Broker

https://community.softwaregrp.com/t5/ArcSight- User-Discussions/How-much-time-it-takes-to- Setup-a-new-Software-Logger-in-VM/m- p/1667622#M44438

Rohan Sikri 9/26/2018 12:21

how to check configuration of an existing connector

https://community.softwaregrp.com/t5/ArcSight- User-Discussions/how-to-check-configuration-of- an-existing-connector/m-p/1668103#M44492

pskimb 9/30/2018 10:02

my dear friends,i have confusion how to configure arcsight connectors.

https://community.softwaregrp.com/t5/ArcSight- User-Discussions/my-dear-friends-i-have- confusion-how-to-configure-arcsight/m- p/1668184#M44500

chrksiem 10/1/2018 11:27

Event archive disk space used https://community.softwaregrp.com/t5/ArcSight- User-Discussions/Event-archive-disk-space- used/m-p/1668532#M44527

PeSeKa 10/3/2018 8:05

Cases information https://community.softwaregrp.com/t5/ArcSight- User-Discussions/Cases-information/m- p/1668549#M44532

chrksiem 10/3/2018 9:48

Hi Techies, can any one provide insights for Advance correlation rules

https://community.softwaregrp.com/t5/ArcSight- User-Discussions/Hi-Techies-can-any-one- provide-insights-for-Advance-correlation/m- p/1668889#M44560

AarushJ 10/5/2018 7:49


Arcsight ESM manager service is available_unresponsive

https://community.softwaregrp.com/t5/ArcSight- User-Discussions/Arcsight-ESM-manager- service-is-available-unresponsive/m- p/1669281#M44648

sandeeprk1 10/9/2018 6:15

Actor Model Import Connector for Microsoft Active Directory

https://community.softwaregrp.com/t5/ArcSight- User-Discussions/Actor-Model-Import- Connector-for-Microsoft-Active-Directory/m- p/1669553#M44636

Frenjd 10/10/2018 16:26

Secure transfer between two connectors

https://community.softwaregrp.com/t5/ArcSight- User-Discussions/Secure-transfer-between-two- connectors/m-p/1669690#M44642

Miroslav Marcisin 10/11/2018 10:14

How to filter out recurring events form a filter

https://community.softwaregrp.com/t5/ArcSight- User-Discussions/How-to-filter-out-recurring- events-form-a-filter/m-p/1669703#M44651

pskimb 10/11/2018 11:19

values in API event details formatted differentlly to arcsight console

https://community.softwaregrp.com/t5/ArcSight- User-Discussions/values-in-API-event-details- formatted-differentlly-to-arcsight/m- p/1669808#M44664

aox 10/11/2018 23:36

Search ESM for Rules and Filters using specific conditions

https://community.softwaregrp.com/t5/ArcSight- User-Discussions/Search-ESM-for-Rules-and- Filters-using-specific-conditions/m- p/1671036#M44776

BBurns 10/19/2018 19:37

Setting timezone in Destination Settings

https://community.softwaregrp.com/t5/ArcSight- User-Discussions/Setting-timezone-in- Destination-Settings/m-p/1671225#M44793

cmarletta 10/22/2018

ArcSight Console 7 Stacked Bar Chart Limit 20 Values? How to raise this?

https://community.microfocus.com/t5/ArcSight-User-Discussions/ArcSight-Console-7-Stacked-Bar-Chart-Limit-20-Values-How-to/m-

sdenfeld 10/23/2018


raw logs https://community.softwaregrp.com/t5/ArcSight- User-Discussions/raw-logs/m- p/1672084#M44875

7_ranjan_7 10/27/2018

Flexconnector for parsing HTTP headers

https://community.softwaregrp.com/t5/ArcSight- User-Discussions/Flexconnector-for-parsing- HTTP-headers/m-p/1672365#M44889

Arcsight_Logger_Us er

10/30/2018

I want to develop a use case that captures logins out of office hours.

https://community.softwaregrp.com/t5/ArcSight-User-Discussions/I-want-to-develop-a-use-case-that-captures-logins-out-of-office/m-

pskimb 11/5/2018 9:00

Can you perform a clean install of ESM 7.0Patch1?

https://community.softwaregrp.com/t5/ArcSight-User-Discussions/Can-you-perform-a-clean-install-of-ESM-7-0Patch1/m-

Oliver843 11/6/2018 11:58

Can I query/see a history of changes to objects?

https://community.softwaregrp.com/t5/ArcSight-User-Discussions/Can-I-query-see-a-history-of-changes-to-objects/m-

BBurns 11/6/2018 19:28

Hourly count of event sources in dashboard

https://community.softwaregrp.com/t5/ArcSight-User-Discussions/Hourly-count-of-event-sources-in-dashboard/m-

Infosec 11/9/2018 5:36

post_prop_install.sh error

https://community.softwaregrp.com/t5/ArcSight-User-Discussions/post-prop-install-sh-error/m-p/1674498#M45022

user5342816 11/14/2018 8:37

HOW TO - Device Status Monitoring on Logger

https://community.softwaregrp.com/t5/ArcSight-User-Discussions/HOW-TO-Device-Status-Monitoring-on-Logger/m-

mr_ergene 11/16/2018 8:45

FLEX Connectors https://community.softwaregrp.com/t5/ArcSight-User-Discussions/FLEX-Connectors/m-p/1675145#M45065

chrksiem 11/19/2018 16:55

Can we print the query, date and time and user name for the logger

https://community.softwaregrp.com/t5/ArcSight-User-Discussions/Can-we-print-the-query-date-and-time-and-user-name-for-

psandeep17 11/20/2018 8:12


WINC Status and SubStatus

https://community.softwaregrp.com/t5/ArcSight-User-Discussions/WINC-Status-and-SubStatus/m-p/1675715#M45082

dkuehner 11/22/2018 14:26

Customer-supplied Certificate override in Syslog-ng TLS Setup

https://community.softwaregrp.com/t5/ArcSight-User-Discussions/Customer-supplied-Certificate-override-in-Syslog-ng-TLS-

tryptyk 11/22/2018 18:58

ESM 7.0 P1 HA instalation fail

https://community.softwaregrp.com/t5/ArcSight-User-Discussions/ESM-7-0-P1-HA-instalation-fail/m-p/1676263#M45110

Miroslav Marcisin

11/27/2018 13:03

No database configuration files (*.sdktbdatabase.properti

https://community.softwaregrp.com/t5/ArcSight-User-Discussions/No-database-configuration-files-sdktbdatabase-

Sadek Abdelnaser

11/27/2018 13:18

ESM - Logical Operator Question

https://community.softwaregrp.com/t5/ArcSight-User-Discussions/ESM-Logical-Operator-Question/m-p/1676497#M45117

Oliver843 11/28/2018 10:32

Anyone getting an error when trying to import hosts to ArcMC?

https://community.softwaregrp.com/t5/ArcSight-User-Discussions/Anyone-getting-an-error-when-trying-to-import-hosts-to-

Brett Pladna 11/28/2018 21:10

Logger TOPgroup by with limit on second field

https://community.softwaregrp.com/t5/ArcSight-User-Discussions/Logger-TOPgroup-by-with-limit-on-second-field/m-

Stepan 11/29/2018 6:59

CheckPoint SmartConnector R80.10 parsing issues

https://community.softwaregrp.com/t5/ArcSight-User-Discussions/CheckPoint-SmartConnector-R80-10-parsing-issues/m-

dkuehner 11/29/2018 8:51

ESM Audit - Get IP Address from logged users

https://community.softwaregrp.com/t5/ArcSight-User-Discussions/ESM-Audit-Get-IP-Address-from-logged-users/m-

dfc 11/30/2018 16:48

MSSQL id flex connector - convertHashMapToRequ

https://community.softwaregrp.com/t5/ArcSight-User-Discussions/MSSQL-id-flex-connector-

mat053241 12/3/2018 21:18


Azure Event Hub zip file https://community.softwaregrp.com/t5/ArcSight-User-Discussions/Azure-Event-Hub-zip-file/m-p/1677517#M45206

alexandros_n 12/5/2018 10:46

Gartner Quadrant and the future of ArcSight

https://community.softwaregrp.com/t5/ArcSight-User-Discussions/Gartner-Quadrant-and-the-future-of-ArcSight/m-

SecLex 12/5/2018 21:59

Arcsight Logger SUID / SGID

https://community.softwaregrp.com/t5/ArcSight-User-Discussions/Arcsight-Logger-SUID-SGID/m-p/1677692#M45222

Arcsight_Logger_User

12/6/2018 7:43

Top Value Counts Data Monitor and # of distinct events value

https://community.softwaregrp.com/t5/ArcSight-User-Discussions/Top-Value-Counts-Data-Monitor-and-of-distinct-events-

Infosec 12/7/2018 9:32

Box Smart connector https://community.softwaregrp.com/t5/ArcSight-User-Discussions/Box-Smart-connector/m-p/1677968#M45252

Fred McGhee 12/8/2018 20:46

Stored Procedure - how to write parser for FlexConnector?

https://community.softwaregrp.com/t5/ArcSight-User-Discussions/Stored-Procedure-how-to-write-parser-for-FlexConnector/m-

Victor 12/11/2018 13:53

Oracle Time Based Flex Connector

https://community.softwaregrp.com/t5/ArcSight-User-Discussions/Oracle-Time-Based-Flex-Connector/m-p/1678665#M45320

pskimb 12/13/2018

anyone encounter this error message when setting up the WISC?

https://community.softwaregrp.com/t5/ArcSight-User-Discussions/anyone-encounter-this-error-message-when-setting-up-the-

paynec 12/15/2018

Mapping an additional data name that includes a special character.

https://community.softwaregrp.com/t5/ArcSight-User-Discussions/Mapping-an-additional-data-name-that-includes-a-

poling253 12/17/2018

Troubleshooting ESM standard rule

https://community.softwaregrp.com/t5/ArcSight-User-Discussions/Troubleshooting-ESM-standard-rule/m-p/1679221#M45393

Infosec 12/18/2018


Arcsight multi-agent configuration

https://community.microfocus.com/t5/ArcSight-User-Discussions/Arcsight-multi-agent-configuration/m-p/1679227#M45376

Gergo 12/18/2018

ADP appliance and Event Broker clarification

https://community.microfocus.com/t5/ArcSight-User-Discussions/ADP-appliance-and-Event-Broker-clarification/m-

Gergo 12/18/2018

ADP and ESM best practices and clarification

https://community.microfocus.com/t5/ArcSight-User-Discussions/ADP-and-ESM-best-practices-and-clarification/m-

Gergo 12/18/2018

Integration ArcSight with Resilient

https://community.microfocus.com/t5/ArcSight-User-Discussions/Integration-ArcSight-with-Resilient/m-p/1679613#M45446

jakub_gawinkows

12/20/2018

Fortigate FW categorization is missing

https://community.microfocus.com/t5/ArcSight-User-Discussions/Fortigate-FW-categorization-is-missing/m-

arpit06051 12/26/2018

Backup Arcsight Express configuration

https://community.softwaregrp.com/t5/ArcSight-User-Discussions/Backup-Arcsight-Express-configuration/m-

PeSeKa 1/4/2019

A way to re-initiate failed events backup

https://community.microfocus.com/t5/ArcSight-User-Discussions/A-way-to-re-initiate-failed-events-backup/m-

Infosec 1/4/2019

TOP Count of EPS from integrated data sources

https://community.microfocus.com/t5/ArcSight-User-Discussions/TOP-Count-of-EPS-from-integrated-data-sources/m-

7_ranjan_7 1/7/2019

Create Use Case to detect activity from Subnets

https://community.microfocus.com/t5/ArcSight-User-Discussions/Create-Use-Case-to-detect-activity-from-Subnets/m-

nalona 1/8/2019

ESM Rule multiple firing https://community.microfocus.com/t5/ArcSight-User-Discussions/ESM-Rule-multiple-firing/m-p/1680995#M45552

Infosec 1/9/2019


ESM Certificate Generation Issues

https://community.microfocus.com/t5/ArcSight-User-Discussions/ESM-Certificate-Generation-Issues/m-p/1681355#M45576

Oliver843 1/11/2019

Remove table from the bar chart

https://community.microfocus.com/t5/ArcSight-User-Discussions/Remove-table-from-the-bar-chart/m-p/1681804#M45605

Infosec 1/15/2019

Logger 6.61 - Unable to receive events on logger: http 503 error

https://community.microfocus.com/t5/ArcSight-User-Discussions/Logger-6-61-Unable-to-receive-events-on-logger-http-503-

Arcsight_Logger_User

1/21/2019

CEF format Domain and Username starting with \n and \r missing in

https://community.microfocus.com/t5/ArcSight-User-Discussions/CEF-format-Domain-and-Username-starting-with-n-and-r-

Timur Ziganshin

1/23/2019

Apply additional license to ESM

https://community.microfocus.com/t5/ArcSight-User-Discussions/Apply-additional-license-to-ESM/m-p/1682993#M45700

Oliver843 1/23/2019

How can I Fix Package Importing in ArcSight ESM Console?

https://community.microfocus.com/t5/ArcSight-User-Discussions/How-can-I-Fix-Package-Importing-in-ArcSight-ESM-

zargaran 1/25/2019

logger hardware requirements

https://community.microfocus.com/t5/ArcSight-User-Discussions/logger-hardware-requirements/m-p/1683855#M45750

dcygan1 1/29/2019

What is the latest version for arcsight?

https://community.microfocus.com/t5/ArcSight-User-Discussions/What-is-the-latest-version-for-arcsight/m-p/1684163#M45767

koushik Tech 1/31/2019

Correlated events Location

https://community.microfocus.com/t5/ArcSight-User-Discussions/Correlated-events-Location/m-p/1684168#M45768

7_ranjan_7 1/31/2019

Configure OSSEC to send logs to Arcsight

https://community.microfocus.com/t5/ArcSight-User-Discussions/Configure-OSSEC-to-send-logs-to-Arcsight/m-

nalona 1/31/2019


Hadoop and ArcSight Bi-Directional Integration

https://community.microfocus.com/t5/ArcSight-User-Discussions/Hadoop-and-ArcSight-Bi-Directional-Integration/m-

satish3 2/3/2019

EventBroker admin's password

https://community.microfocus.com/t5/ArcSight-User-Discussions/EventBroker-admin-s-password/m-p/1684650#M45810

leda 2/4/2019

Logger HA Logger pool documentation

https://community.microfocus.com/t5/ArcSight-User-Discussions/Logger-HA-Logger-pool-documentation/m-p/1684861#M45829

lgabrielli 2/5/2019

ESM 6.11 can not create a use case

https://community.microfocus.com/t5/ArcSight-User-Discussions/ESM-6-11-can-not-create-a-use-case/m-p/1685305#M45884

dcygan1 2/7/2019

Command Center Not working after changing CaseUI

https://community.microfocus.com/t5/ArcSight-User-Discussions/Command-Center-Not-working-after-changing-CaseUI/m-

Abxd0 2/13/2019

Can someone explain to me how "devices"

https://community.microfocus.com/t5/ArcSight-User-Discussions/Can-someone-explain-to-me-how-quot-devices-quot-

mdearing971 2/13/2019

What's the best way to let data flow?

https://community.microfocus.com/t5/ArcSight-User-Discussions/What-s-the-best-way-to-let-data-flow/m-p/1686343#M45934

mdearing971 2/13/2019

ArcSight ESM API for Getting the Query Viewer Data

https://community.microfocus.com/t5/ArcSight-User-Discussions/ArcSight-ESM-API-for-Getting-the-Query-Viewer-Data/m-

Aneesh Salimkumar

2/19/2019

Help me with ArcMC download

https://community.microfocus.com/t5/ArcSight-User-Discussions/Help-me-with-ArcMC-download/m-p/1687034#M46001

nalona 2/19/2019

installation issues of SC 7.11.0.8139.0 on CentOS 7.5.1804

https://community.microfocus.com/t5/ArcSight-User-Discussions/installation-issues-of-SC-7-11-0-8139-0-on-CentOS-7-5-1804/m-

vitz1 2/24/2019


Microsoft Exchange Message Tracking Smart Connector Error

https://community.microfocus.com/t5/ArcSight-User-Discussions/Microsoft-Exchange-Message-Tracking-Smart-Connector-

PeSeKa 2/25/2019

CEF ASM Mapping in another field

https://community.microfocus.com/t5/ArcSight-User-Discussions/CEF-ASM-Mapping-in-another-field/m-p/1688076#M46079

tryptyk 2/26/2019

ssh timeout after ArcMC RHEL upgrade

https://community.microfocus.com/t5/ArcSight-User-Discussions/ssh-timeout-after-ArcMC-RHEL-upgrade/m-

rtoni1 2/26/2019

ArcSight || SmartConnector 7.11 || Regex folder Connector

https://community.microfocus.com/t5/ArcSight-User-Discussions/ArcSight-SmartConnector-7-11-Regex-folder-

tonyssbear 3/1/2019

Smart-connector 7.11 || Using Regex || Cannot find IP address field

https://community.microfocus.com/t5/ArcSight-User-Discussions/Smart-connector-7-11-Using-Regex-Cannot-find-IP-address-

tonyssbear 3/4/2019

Does McAfee ePO DB SmartConnector supports ePO version

https://community.microfocus.com/t5/ArcSight-User-Discussions/Does-McAfee-ePO-DB-SmartConnector-supports-ePO-

Gitlf 3/6/2019

IF AND statement for actions in a rule

https://community.microfocus.com/t5/ArcSight-User-Discussions/IF-AND-statement-for-actions-in-a-rule/m-p/1763566#M46144

markk308 3/7/2019

Use Case || How to join two Events with Active List || how to set pre-

https://community.microfocus.com/t5/ArcSight-User-Discussions/Use-Case-How-to-join-two-Events-with-Active-List-how-to-

tonyssbear 3/18/2019

Extracting hostname from FQDN ihn logger search

https://community.microfocus.com/t5/ArcSight-User-Discussions/Extracting-hostname-from-FQDN-ihn-logger-

Per Bejder 3/25/2019

Can I convert startTime to string? (ESM)

https://community.microfocus.com/t5/ArcSight-User-Discussions/Can-I-convert-startTime-to-string-ESM/m-

radial1 3/26/2019


ArcMC 2.61 connector upgrade breaks ArcMC device by device product

https://community.microfocus.com/t5/ArcSight-User-Discussions/ArcMC-2-61-connector-upgrade-breaks-ArcMC-device-

angelo cappelli

4/3/2019

Smartconnectors managed by ArcMc and ESM at the same time

https://community.microfocus.com/t5/ArcSight-User-Discussions/Smartconnectors-managed-by-ArcMc-and-ESM-at-the-

JDB_ 4/9/2019 11:02

Parse MM:dd:yy HH:mm:ss timestamp

https://community.microfocus.com/t5/ArcSight-User-Discussions/Parse-MM-dd-yy-HH-mm-ss-timestamp/m-

ganchu1 4/15/2019 8:48

ArcSight Load Balancer - Filtering

https://community.microfocus.com/t5/ArcSight-User-Discussions/ArcSight-Load-Balancer-Filtering/m-p/1769195#M46396

gvaltas 4/15/2019 11:44

Flex Connector - events adds special characters.

https://community.microfocus.com/t5/ArcSight-User-Discussions/Flex-Connector-events-adds-special-characters/m-


Replace white space character in messageid token string

https://community.microfocus.com/t5/ArcSight-User-Discussions/Replace-white-space-character-in-messageid-token-

ganchu1 4/23/2019 9:32

Step by step - Parser syslog Logger

https://community.microfocus.com/t5/ArcSight-User-Discussions/Step-by-step-Parser-syslog-Logger/m-p/1770656#M46469

Fred Henrique 4/24/2019 17:53

Integration Command to query Active List

https://community.microfocus.com/t5/ArcSight-User-Discussions/Integration-Command-to-query-Active-List/m-

Infosec 4/26/2019 12:23

ESM user creation with never expire credentials

https://community.microfocus.com/t5/ArcSight-User-Discussions/ESM-user-creation-with-never-expire-credentials/m-

7_ranjan_7 4/26/2019 11:10

Error while uploading License file to ESM

https://community.microfocus.com/t5/ArcSight-User-Discussions/Error-while-uploading-License-file-to-ESM/m-

sanj1 5/8/2019 6:20


ESM HA Dual Feeding https://community.microfocus.com/t5/ArcSight-User-Discussions/ESM-HA-Dual-Feeding/m-p/1790487#M46573

aquillius.t@net 5/9/2019 12:00

Error while adding correlator node to a cluster

https://community.microfocus.com/t5/ArcSight-User-Discussions/Error-while-adding-correlator-node-to-a-cluster/m-

ismael2251 5/9/2019 18:13

Fatal exception while configuring ESM

https://community.microfocus.com/t5/ArcSight-User-Discussions/Fatal-exception-while-configuring-ESM/m-

sanj1 5/10/2019 11:29

passwordless ssh failed https://community.microfocus.com/t5/ArcSight-User-Discussions/passwordless-ssh-failed/m-p/1790972#M46606

ismael2251 5/13/2019 15:23

Arcsight certification https://community.microfocus.com/t5/ArcSight-User-Discussions/Arcsight-certification/m-p/1791131#M46618

chauhan_rahul1890

5/14/2019 11:28

Custom parser for the Windows Event Forwarding scenario

https://community.microfocus.com/t5/ArcSight-User-Discussions/Custom-parser-for-the-Windows-Event-Forwarding-

Infosec 5/15/2019 4:53

stix and taxii integrations https://community.microfocus.com/t5/ArcSight-User-Discussions/stix-and-taxii-integrations/m-p/1791595#M46663

robert.mustard 5/16/2019 18:13

Execute Query via ESM REST API?

https://community.microfocus.com/t5/ArcSight-User-Discussions/Execute-Query-via-ESM-REST-API/m-p/1791726#M46677

AutomationGeek

5/17/2019 14:37

Distributed architecture Implementation

https://community.microfocus.com/t5/ArcSight-User-Discussions/Distributed-architecture-Implementation/m-

7_ranjan_7 5/21/2019 5:00

Microsoft SCCM- Endpoint Protection Integration with ArcSight

https://community.microfocus.com/t5/ArcSight-User-Discussions/Microsoft-SCCM-Endpoint-Protection-Integration-with-

parvezg 5/21/2019 5:09


smart connector EPS https://community.microfocus.com/t5/ArcSight-User-Discussions/smart-connector-EPS/m-p/1792082#M46698

7_ranjan_7 5/21/2019 12:47

Masking PII from email notification

https://community.microfocus.com/t5/ArcSight-User-Discussions/Masking-PII-from-email-notification/m-p/1792323#M46724

dyepransisko 5/22/2019

SQL statement to count distinct UserNames

https://community.microfocus.com/t5/ArcSight-User-Discussions/SQL-statement-to-count-distinct-UserNames/m-

mtester 5/22/2019

ESM HA Licence feature https://community.microfocus.com/t5/ArcSight-User-Discussions/ESM-HA-Licence-feature/m-p/1792929#M46787

sanj 5/27/2019

Issue with Logger Peer Search

https://community.microfocus.com/t5/ArcSight-User-Discussions/Issue-with-Logger-Peer-Search/m-p/1793173#M46798

Ajith K S 5/28/2019

ArcSight Load Balancer performance is more than disappointing

https://community.microfocus.com/t5/ArcSight-User-Discussions/ArcSight-Load-Balancer-performance-is-more-than-

chrisschn 5/29/2019

how to create flex connector

https://community.microfocus.com/t5/ArcSight-User-Discussions/how-to-create-flex-connector/m-p/1793929#M46850

chauhan_rahul1890

6/3/2019

SMTP port other than TCP 25 on ArcSight Logger and ESM or

https://community.microfocus.com/t5/ArcSight-User-Discussions/SMTP-port-other-than-TCP-25-on-ArcSight-Logger-and-

ArcSight Newbie

6/7/2019

no logs on connector but traffic on wireshark

https://community.microfocus.com/t5/ArcSight-User-Discussions/no-logs-on-connector-but-traffic-on-wireshark/m-

SET 6/7/2019

Error installing RPMs https://community.microfocus.com/t5/ArcSight-User-Discussions/Error-installing-RPMs/m-p/1795022#M46914

sanj1288 6/10/2019


File system partitioning when install Software Logger

https://community.microfocus.com/t5/ArcSight-User-Discussions/File-system-partitioning-when-install-Software-

lgabrielli 6/11/2019

Flex connector for RHEL 7.6 troubleshoot

https://community.microfocus.com/t5/ArcSight-User-Discussions/Flex-connector-for-RHEL-7-6-troubleshoot/m-

Miran Arsalan Sleman

6/13/2019

SWIFT Confusion and Clarification

https://community.microfocus.com/t5/ArcSight-User-Discussions/SWIFT-Confusion-and-Clarification/m-p/1795583#M46956

Timon 6/13/2019

Multiple ArcMCs in different tenants

https://community.microfocus.com/t5/ArcSight-User-Discussions/Multiple-ArcMCs-in-different-tenants/m-p/2682805#M47014

Gergo 6/21/2019

Failed to add ESM on Logger - please help

https://community.microfocus.com/t5/ArcSight-User-Discussions/Failed-to-add-ESM-on-Logger-please-help/m-

andy 6/27/2019

ArcSight SmartConnector cache for 30-90 days possible?

https://community.microfocus.com/t5/ArcSight-User-Discussions/ArcSight-SmartConnector-cache-for-30-90-days-

JDB_ 6/27/2019

unable to retrieve token from log

https://community.microfocus.com/t5/ArcSight-User-Discussions/unable-to-retrieve-token-from-log/m-p/2684439#M47108

Thomas69 7/1/2019

log stoppage https://community.microfocus.com/t5/ArcSight-User-Discussions/log-stoppage/m-p/2684605#M47122

chauhan_rahul1890

7/1/2019

arcsight.common.persist.ResourceNotFoundException error while trying to

https://community.microfocus.com/t5/ArcSight-User-Discussions/arcsight-common-persist-ResourceNotFoundException-error-

Ajith12 7/9/2019

Cacert related error while login to console

https://community.microfocus.com/t5/ArcSight-User-Discussions/Cacert-related-error-while-login-to-console/m-

sanj1288 7/11/2019


Limiting EPS at Connector Level

https://community.microfocus.com/t5/ArcSight-User-Discussions/Limiting-EPS-at-Connector-Level/m-p/2686415#M47191

siddarthtalupula1

7/12/2019

populating deviceExternalid

https://community.microfocus.com/t5/ArcSight-User-Discussions/populating-deviceExternalid/m-p/2686417#M47192

habex379 7/12/2019

ESM 6.11 Patches missing?

https://community.microfocus.com/t5/ArcSight-User-Discussions/ESM-6-11-Patches-missing/m-p/2686625#M47208

mboucher31 7/15/2019

Integration Command to Full URL from Event

https://community.microfocus.com/t5/ArcSight-User-Discussions/Integration-Command-to-Full-URL-from-Event/m-

jdc07301 7/16/2019

ArcSight || VM ESM System requirement?

https://community.microfocus.com/t5/ArcSight-User-Discussions/ArcSight-VM-ESM-System-requirement/m-

tonyssbear 7/18/2019


Date post:	25-Aug-2020
Category:	Documents
Upload:	others
View:	100 times
Download:	0 times

Accepted Solutions in ArcSight discussion board · July 24, 2019 Note: This is not an official...

Documents