Top Voted Ideas: Last 30 Days
Add report on devices reporting to ArcMc as an actual report or export
8
Change the 10.000.000 events limit in Recon to rows
7
Idea ID: 2869588

Arcsight Connector support for Cisco Meraki AMP modules

SET SET
Status : Under Consideration

HI Team,

Requesting you to please update parser and add support for below Cisco Meraki Models, as we are receiving unparsed logs from below firewall modules.

 

MX100

MX250

MX60

MX64

MX64W

MX65

MX65W

MX67

MX67C-NA

MX67W

MX68

MX68W

MX84

vMX100

Z1

Z3

Z3C-NA

Regards:

Ankit V

  • I am struggling with the same thing on Cisco Meraki MX250. Any feedback on these?

  • Currently only MR52 model seems to be fully parsed. for the other models the source target information seems to be grouped together on the event.message field. It would be good to update the parser for better value of the logs. 

Resources

Support
Documentation
Learning Services
Partner Programs
Privacy
Compliance
Help
Company
Privacy Policy
Terms of Use
Accessibility
Anti-Slavery Statement
Support
Contact Us
Careers
Code of Business Conduct and Ethics
The opinions expressed above are the personal opinions of the authors, not of OpenText. By using this site, you accept the Terms of Use. Certain versions of content ("Material") accessible here may contain branding from Hewlett-Packard Company (now HP Inc.), Hewlett Packard Enterprise Company, or Micro Focus. As of January 31, 2023, the Material is now offered by OpenText, a separately owned and operated company. Any reference to the HP, Hewlett Packard Enterprise/HPE, and Micro Focus marks is historical in nature and the HP, Hewlett Packard Enterprise/HPE, and Micro Focus marks are the property of their respective owners.