ArcSight Idea Exchange

2021-10-19

Idea ID: 2871527

Specific MISP feeds to be integrated with ArcSight

by Vishwajeet06 in ArcSight

0 votes

Labels: Connectors

Status: New Idea
- New Idea on 19 Oct 2021
- 0 Comments
Hi Team, We are looking at the capability to pull specific MISP feeds via the ArcSight MISP Connector - e.g. https://xx.xx.xx.xx/feed1 . the support for this is 02016916. However we are unable to do so at present. Since the MISP URL is only able...
- Ideas Id :
2021-10-19

Idea ID: 2871522

Logger allocated memory more than 60%

by Eng_SOP in ArcSight

0 votes

Labels: Deploy & Arch. , Logger-Search-Reporting

Status: New Idea
- New Idea on 19 Oct 2021
- 0 Comments
Logger allocates about 60% of the total available memory to the processes which it then shares to the processes as configured either by roles or by processes. The allocation about 60% is too low. This limit should be tunable for servers with high amount...
- Ideas Id :
2021-10-15

Idea ID: 2871499

SOC Manager feature in Arcsight Console

by Muhammad Kamran khan in ArcSight

0 votes

Labels: ArcMC , ESM , Investigate

Status: New Idea
- New Idea on 15 Oct 2021
- 0 Comments
Dear Team, I am assigning ticket or an incident from Arcsight Console using SOC Manager option but the user to whom ticket is assigned is not visible to him. After querying to Micro Focus they told me that only user having admin rights is able to see...
- Ideas Id :
2021-10-06

Idea ID: 2871408

arcsight ideas

by Thomas69 in ArcSight

4 votes

Labels: ArcMC , Content , Recon , Transformation Hub , UEBA-ML-AI-Interset

Status: New Idea
- New Idea on 6 Oct 2021
- 2 Comments
ArcMC (3.0): - remove the "bulk operation" options from node management; sometimes it's annoying that we can click operations such as "scan host" then it tells it's deprecated and go to bulk operations - bulk operations: when i select multiple hosts...
- Ideas Id :
2021-10-05

Idea ID: 2871388

Logger-custom field set creation using text box

by sandeeprk1 in ArcSight

0 votes

Labels: UI-Dashboard-Widget

Status: New Idea
- New Idea on 5 Oct 2021
- 2 Comments
Creation of custom field set in logger is pain full ,which required user to add field one by one by selecting field category -->Fields-->Use arrow marks to add and remove fields. Instead of multiple steps there should be an option, using "text box...
- Ideas Id :
2021-10-05

Idea ID: 2871384

Develop connectors for Netsecure

by TerrenceHsu in ArcSight

1 votes

Labels: Connectors

Status: New Idea
- New Idea on 5 Oct 2021
- 0 Comments
- Ideas Id :
2021-10-04

Idea ID: 2871376

Content upgrade reconciliation tool

by Piotr K in ArcSight

1 votes

Labels: Content

Status: New Idea
- New Idea on 4 Oct 2021
- 0 Comments
At present the upgrade of the resources that content constitutes of is performed automatic way. All the resources get replaced with their successors introduced within the target version of ESM. The approach is not appreciated by the admin teams of ArcSight...
- Ideas Id :
2021-10-04

Idea ID: 2871369

Standard Connector for LB & WAF in OCI

by Mss Smart in ArcSight

0 votes

Labels: Connectors

Status: New Idea
- New Idea on 4 Oct 2021
- 0 Comments
Hi Team, We have a customer requirement for onboarding WAF & LB in the OCI environment. There is no standard connector for the same and it is quite complicated to create a JSON parser for the flex connector. So please create a JSON parser for the same...
- Ideas Id :
2021-10-01

Idea ID: 2871360

Fusion user management - delete user

by Eng_SOP in ArcSight

2 votes

Labels: UI-Dashboard-Widget

Status: New Idea
- New Idea on 1 Oct 2021
- 1 Comment
Please add the ability to delete users in Fusion. I think the user management should have so function and the idea of Dev team is wrong. MF development say "this was intentionally excluded from Fusion because if a user rejoins the organization then...
- Ideas Id :
2021-10-01

Idea ID: 2871356

ESM Distributed - Able to assign specific interfaces for services

by henk-jan.van.es in ArcSight

4 votes

Labels: ESM

Status: New Idea
- New Idea on 1 Oct 2021
- 1 Comment
For network segregation within an ESM distributed environment, it would be great able to assign specific HostNames/IP addresses to be used. Currently, most of the services rely on the defined hostname on the OS. Some of the services can be assigned to...
- Ideas Id :
2021-10-01

Idea ID: 2871353

ESM Space Feasibility

by socm in ArcSight

0 votes

Labels: ESM

Status: New Idea
- New Idea on 1 Oct 2021
- 0 Comments
Hello Team, We have a requirement to increase default event storage group size, As checked in the guide we cannot extend more than 12 TB. If we can extend how can it be done,Please let us know. Looking forward to hear from You. Thank you...
- Ideas Id :
2021-10-01

Idea ID: 2871349

ESM global variable handling - dont copy into local variables

by ianfitz in ArcSight

1 votes

Labels: ESM

Status: New Idea
- New Idea on 1 Oct 2021
- 0 Comments
Hi there, Hoping you could update behaviour of Global Variables. If I create a GV string, say containing "value1" I then use the GV in a rule When I add the GV and press OK/Apply it creates another LV with the same name in the rule itself. ...
- Ideas Id :
2021-09-30

Idea ID: 2871341

Extend parser coverage for googlecloud connector

by George Chacko in ArcSight

0 votes

Labels: APIs , Connectors

Status: Accepted
- Accepted on 1 Oct 2021
- 0 Comments
Happy to see googlecloud connector release with the latest smart connector framework. Will be really useful if the parsing coverage is expanded to accommodate more services especially, VPC Flow Logs, Firewall Rules Logging, and Security command center...
- Ideas Id :
2021-09-30

Idea ID: 2871336

Develop connector for Imperva Linux

by TerrenceHsu in ArcSight

0 votes

Labels: Connectors

Status: New Idea
- New Idea on 30 Sep 2021
- 0 Comments
- Ideas Id :
2021-09-27

Idea ID: 2871296

Develop connectors for integrating Google sync and SMTP devices to arcsight ESM

by Lydia Mc lisy in ArcSight

0 votes

Labels: Connectors

Status: New Idea
- New Idea on 27 Sep 2021
- 0 Comments
- Ideas Id :
2021-09-27

Idea ID: 2871294

Develop connectors for integrating Google sync and SMTP devices to arcsight ESM.

by Nivetha Rajamani in ArcSight

0 votes

Labels: Connectors

Status: New Idea
- New Idea on 27 Sep 2021
- 0 Comments
Please develop connectors for integrating Google sync and SMTP devices to arcsight ESM.
- Ideas Id :
2021-09-27

Idea ID: 2871291

Develop connectors for integrating Google sync and SMTP devices to arcsight ESM.

by itzabishek in ArcSight

0 votes

Labels: Connectors

Status: New Idea
- New Idea on 27 Sep 2021
- 0 Comments
Please develop connectors for integrating Google sync and SMTP devices to arcsight ESM.
- Ideas Id :
2021-09-27

Idea ID: 2871288

Develop connectors for integrating Google sync and SMTP devices to arcsight ESM.

by Sebin Sunny in ArcSight

0 votes

Labels: Connectors

Status: New Idea
- New Idea on 27 Sep 2021
- 0 Comments
Please develop connectors for integrating Google sync and SMTP devices to arcsight ESM.
- Ideas Id :
2021-09-24

Idea ID: 2871275

Have JSON extraprocessors create separate events for each item in an array

by Beirne in ArcSight

2 votes

Labels: Connectors

Status: New Idea
- New Idea on 24 Sep 2021
- 0 Comments
JSON connectors are designed to create a separate event for each entry in an array. However, when a JSON parser is used as an extraprocessor and the data has an array of events, only the first one gets turned into an ArcSight event. The rest are ignored...
- Ideas Id :
2021-09-24

Idea ID: 2871263

Solution required for update service account password in smart connectors automatically via PAM tools

by Madana gopal Rajabather in ArcSight

1 votes

Labels: Connectors , Deploy & Arch.

Status: New Idea
- New Idea on 24 Sep 2021
- 3 Comments
Most of the organizations are implementing PAM solution & doing password vaulting. Some organization decided to change service account password periodically. Currently Service account password which are used to collect logs from servers need to be changed...
- Ideas Id :

Menu

ArcSight

ArcSight Idea Exchange

Labels

Specific MISP feeds to be integrated with ArcSight

Logger allocated memory more than 60%

SOC Manager feature in Arcsight Console

arcsight ideas

Logger-custom field set creation using text box

Develop connectors for Netsecure

Content upgrade reconciliation tool

Standard Connector for LB & WAF in OCI

Fusion user management - delete user

ESM Distributed - Able to assign specific interfaces for services

ESM Space Feasibility

ESM global variable handling - dont copy into local variables

Extend parser coverage for googlecloud connector

Develop connector for Imperva Linux

Develop connectors for integrating Google sync and SMTP devices to arcsight ESM

Develop connectors for integrating Google sync and SMTP devices to arcsight ESM.

Develop connectors for integrating Google sync and SMTP devices to arcsight ESM.

Develop connectors for integrating Google sync and SMTP devices to arcsight ESM.

Have JSON extraprocessors create separate events for each item in an array

Solution required for update service account password in smart connectors automatically via PAM tools

Resources