Security System Monitoring

This is the official forum and change lists for Security System Monitoring.

 

The Security System Monitoring package is available on the ArcSight Marketplace (Micro Focus Marketplace - Activate Packages).

--
Prentice S. Hayes
Product Management, ArcSight | Connectors
Micro Focus

dvcIpToString.zip
  • There is a minor issue with Activate Base 2.0.0.0, it is missing a global variable (GV), /All Fields/ArcSight Activate/Core/Field Manipulation/Convert Type/dvcIpToString, which is needed by one or more of the C-System Security Monitoring packages. The dvcIpToString.zip file contains the GV. If you need it, please download and extract the zip file, and import dvcIpToString.arb via the ESM Console.

    This issue is corrected in Activate Base 2.1.0.0. Please accept my apologies for this issue.

    --
    Prentice S. Hayes
    Product Management, ArcSight | Connectors
    Micro Focus

  • Hi,

    I have installed this arb package on top of my ssm installation, and it seem to be working however im not able to get the notifications sent according to the rules, are you able to provide more guidelines regarding the notification topic? is it necessary to have a vm template other than the one configured in the rule?

  • We've been using the SmartConnector Monitoring pack over a year now. Recently we have seen a few strange Connectors poping up in the Active List named "Connector", they are all called "[Restart Connector Behind Logger]". We have restarted our Loggers and their Connectors but these Connectors still have these names. Anyone know what they might be?