Versions Compared

Old Version 7

changes.mady.by.user Shirly Tsang

Saved on

compared with

New Version 8

changes.mady.by.user Gary Leicht

Saved on

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

You can perform a real-time check of whether the data transferred from Data Connector has reached the Micro Focus ArcSight ESM destination. Data Connector transfers DNS queries and logs to Micro Focus SmartConnector, which forwards them to Micro Focus ArcSight Manager, which displays the following information as soon as the data arrives at the destination:


Image: The ArcSight Command Center, a part of a security information and event management (SIEM) system displaying the "Active Channel - Live" view, showing real-time security events.

Configuring Micro Focus SmartConnector to Communicate with Data Connector

...

1. Execute the program ArcSight-<version string>-connector:

Image: The installation wizard for the ArcSight SmartConnector displaying a window where the user can choose the install folder for the SmartConnector.

2. Select the folder where you want to install ArcSight SmartConnector, and click Next.

Image: The installation wizard for the ArcSight SmartConnector displaying a window where the user can select an installation folder.  

3. Select the folder where you want to create links, and click Next. 

Image: The installation wizard for the ArcSight SmartConnector displaying a window where the user can create links.  

4. Review the information, and click Install to confirm or Previous to go back.

Image: The installation wizard for the ArcSight SmartConnector displaying the pre-install summary.  

5. After Micro Focus SmartConnector is installed successfully, the Connector Setup wizard appears.

Image: The installation wizard for the ArcSight SmartConnector displaying the confirmation of setup page.  

6. Select Add a Connector, and click Next.

Configure Micro Focus ArcSight Manager

1. Set Type to Syslog NG Daemon, and click Next.

Image: The installation wizard for the ArcSight SmartConnector displaying the the connector setup page where a connector can be selected and configured.  

2. Enter the following details, and click Next. 

Image: The installation wizard for the ArcSight SmartConnector displaying the the connector setup page where the connector configuration parameters can be added. 

  • Network Port: Specify the same port number as the one you specified while configuring the destination in Data Connector.
  • IP Address: Enter the IP address of Data Connector.
  • Protocol: To use the TLS encryption protocol for Syslog, select TLS.

3. Select ArcSight Manager (encrypted), and click Next.

Image: The installation wizard for the ArcSight SmartConnector displaying the the connector setup page where the connector destination can be selected.

4. Specify the IP address and port number of ArcSight Manager, specify other credentials, and click Next.


Image: The installation wizard for the ArcSight SmartConnector displaying the the connector setup page where an IP address and port number can be selected.

5. Complete the rest of the installation as per the installation wizard.

...