ArcSight Idea Exchange

Welcome to ArcSight Idea Exchange

This idea exchange is for submitting product enhancement ideas only. If you have a question about the product, please click on the “Discussions” tab above and post your questions there.

2022-08-17

Idea ID: 2873988

S3 AWS connector needs to be able to parse any log from one connector

by pladna in ArcSight

5 votes

Labels: Connectors

Status: New Idea
- New Idea on 2022-8-17
- 1 Comment
Right now the S3 connector is designed to only ingest one log type per connector install. It would make more sense for the S3 connector to act like the syslog connector and let the connector figure out which parser needs to apply to each event that is...
- Ideas Id :
2022-08-05

Idea ID: 2873900

Fix Bug When Clicking Generator Resource in Correlation Alerts

by TM in ArcSight

1 votes

Labels: ESM

Status: New Idea
- New Idea on 2022-8-5
- 0 Comments
Sometimes when opening a correlation alert and clicking "Generator Resource" it opens a resource with the same name (usually the similar rule in out testing folder or an Active List with the same name). I think it is just a bug in the way the generator...
- Ideas Id :
2022-07-27

Idea ID: 2873837

JAMF(Just Apple's Management Framework) with ArcSight SIEM

by socm in ArcSight

1 votes

Labels: Connectors

Status: New Idea
- New Idea on 2022-7-27
- 0 Comments
Hi Team, We need to integrate JAMF(Just Apple's Management Framework) with SIEM, Please share the baseline for SIEM integration. this is not available currently please provide your support here
- Ideas Id :
2022-07-26

Idea ID: 2873820

ArcSight SOAR -Changing email notification from basic authentication to Ouath 2.0

by hshi1 in ArcSight

1 votes

Labels: SOAR

Status: Accepted
- Accepted on 2022-8-5
- 0 Comments
We have customer would like to change email notification from basic authentication to Ouath 2.0 on ArcSight SOAR. We found this is not supported currently, is it possible to have this feature?
- Ideas Id :
2022-07-25

Idea ID: 2873801

Arcsight Smart Connector Support for SAP Ver.7.5

by Tang Samuel in ArcSight

2 votes

Labels: Connectors

Status: New Idea
- New Idea on 2022-7-25
- 0 Comments
Hi Product Management Team, Our Arcsight Smart connector (8.3) currently does not support SAP versions 7.50, 7.52 Kindly help to provide an alternative. I would also like to suggest that SAP versions 7.50, 7.52 are to be reviewed by the development...
- Ideas Id :
2022-07-21

Idea ID: 2873781

ArcSight Console 7.5.8 installation failed on Windows Server 2022

by Jean-luc Kanga in ArcSight

1 votes

Labels: ESM

Status: New Idea
- New Idea on 2022-7-21
- 0 Comments
After trying to install ESM 7.5.8 console on Windows Server 2022, we have Fatal Application Error message.
- Ideas Id :
2022-07-15

Idea ID: 2873720

upgradation is actually degradation of features

by Sagar Poladiya in ArcSight

1 votes

Labels: Connectors

Status: New Idea
- New Idea on 2022-7-15
- 1 Comment
Dear All, With reference to ticket - ref:_00D1tvhDP._5008e2fRT8:ref new Integration method enabled by Microsoft in MDATP for logs with Arcsight same provided by arcsight but new Smart connector is not able to capture details where as old version...
- Ideas Id :
2022-07-07

Idea ID: 2873668

ArcSight ESM Older Archives Auto-Deletion

by Thiyagarajan K in ArcSight

1 votes

Labels: ESM

Status: New Idea
- New Idea on 2022-7-7
- 1 Comment
Hi Team , We configured archives in ESM , it is keeping the archives as online first and after the specified days , the archive files are moved to offline. As days go , we do find plenty of offline archives files and it is occupying more space. We...
- Ideas Id :
2022-07-07

Idea ID: 2873666

ESM - Feature Request - Audit Event to track action 'Clear Entries' from an Active List

by OBRADY in ArcSight

2 votes

Labels: ESM

Status: New Idea
- New Idea on 2022-7-7
- 0 Comments
If a user manually clears all entries from an Active List we need an Audit Event to track that action. Feature Request - Audit Event to track action 'Clear Entries' from an Active List Previously submitted under customer request: NGS-14822
- Ideas Id :
2022-07-07

Idea ID: 2873665

Check Point Syslog support for R80.40

by Engineer20I7 in ArcSight

1 votes

Labels: Connectors

Status: New Idea
- New Idea on 2022-7-7
- 0 Comments
Hi Support, Not too sure why there is no support for r80.40 Checkpoint but support for r81 Please assist. Could you please add support for this version also. Regards Uma
- Ideas Id :
2022-06-30

Idea ID: 2873623

Support Google Cloud (GCP) as destination for SmartConnector for cloud log collection/forwarding

by leeshin in ArcSight

2 votes

Labels: Cloud , Connectors , Deploy & Arch.

Status: New Idea
- New Idea on 2022-6-30
- 0 Comments
Request is to have ArcSight SmartConnector to support Google Cloud as the Destination (kafka pub/sub topic). Currently, SmartConnector only supports AWS S3 and Azure Event Hub as cloud destinations. GCP is one of the common cloud platform and there...
- Ideas Id :
2022-06-15

Idea ID: 2873530

IBM Data Power not supported with Arcsight Integration

by Paladion Soc in ArcSight

1 votes

Labels: Connectors

Status: New Idea
- New Idea on 2022-6-15
- 0 Comments
Hi Team, We are raised a request with Support for IBM Data Power Device Integration with ESM. Support Case# 02318349 Regards Paladion SOC
- Ideas Id :
2022-06-15

Idea ID: 2873529

Array Device Not supported with Arcsight Integration

by Paladion Soc in ArcSight

1 votes

Labels: Connectors , ESM

Status: New Idea
- New Idea on 2022-6-15
- 0 Comments
Hi Team, We are raised a request with Support for Array Device Integration with ESM. Support Case# 02318349 Regards Paladion SOC
- Ideas Id :
2022-06-15

Idea ID: 2873528

Silver Peak Device Not Supported with Arcsight Integration

by Paladion Soc in ArcSight

1 votes

Labels: Connectors , ESM

Status: New Idea
- New Idea on 2022-6-15
- 0 Comments
Hi Team, We are raised a request with Support for Silver Peak Integration with ESM. Support Case# 02318349 Regards Paladion SOC
- Ideas Id :
2022-06-15

Idea ID: 2873526

ESM is not using SMTP Authentication while sending email.

by Dhanveer Chauhan in ArcSight

2 votes

Labels: ESM

Status: New Idea
- New Idea on 2022-6-15
- 0 Comments
Hi Team, Currently ESM SMTP relay is not using authentication while sending the mail to another relay .It is a basic security feature that is currently there with every product. So please accept this feature request and try to release it in coming...
- Ideas Id :
2022-06-14

Idea ID: 2873520

Nutanix Device Integration with Arcsight

by Paladion Soc in ArcSight

1 votes

Labels: ESM

Status: New Idea
- New Idea on 2022-6-14
- 0 Comments
Hi Team, We are raised a request with Support for Nutanix Integration with ESM. Support Case# 02318349
- Ideas Id :
2022-06-13

Idea ID: 2873509

Remove artificial limit on number of entries returned from active list

by Hemant Shah in ArcSight

1 votes

Labels: APIs

Status: New Idea
- New Idea on 2022-6-13
- 0 Comments
I am trying to use Swagger API to get all entries from an active list ($ESMUrl/detect-api/rest/activelists/LIST_ID/entries), it returns 2000 entries only. Please remove this limitation so it can be more useful.
- Ideas Id :
2022-06-12

Idea ID: 2873503

Support Cyber Reason Integration with ArcSight ESM

by Amit_Bajpai in ArcSight

2 votes

Labels: APIs , Connectors

Status: New Idea
- New Idea on 2022-6-12
- 0 Comments
Hi Support, Kindly develop smart connector to integrate Cyber Reason EDR with ESM as per standard integration. Thanks, Amit Bajpai
- Ideas Id :
2022-06-09

Idea ID: 2873492

Digitally signed patches

by Lokesh Bhasin in ArcSight

3 votes

Labels: Deploy & Arch.

Status: New Idea
- New Idea on 2022-6-9
- 0 Comments
To get all the patches, hotfixes etc. digitally signed so that the customers can confirm the file is safe and it came from Micro Focus.
- Ideas Id :
2022-06-08

Idea ID: 2873471

Support Ubuntu/Debian

by maresj in ArcSight

2 votes

Labels: API-SDK-Extensibility , Content , ESM

Status: New Idea
- New Idea on 2022-6-8
- 1 Comment
Hello, Centos had its end of life in the end of 2021. Are others systems in consideration besides Red hat ?
- Ideas Id :

Menu

ArcSight

ArcSight Idea Exchange

Labels

Welcome to ArcSight Idea Exchange

S3 AWS connector needs to be able to parse any log from one connector

Fix Bug When Clicking Generator Resource in Correlation Alerts

JAMF(Just Apple's Management Framework) with ArcSight SIEM

ArcSight SOAR -Changing email notification from basic authentication to Ouath 2.0

Arcsight Smart Connector Support for SAP Ver.7.5

ArcSight Console 7.5.8 installation failed on Windows Server 2022

upgradation is actually degradation of features

ArcSight ESM Older Archives Auto-Deletion

ESM - Feature Request - Audit Event to track action 'Clear Entries' from an Active List

Check Point Syslog support for R80.40

Support Google Cloud (GCP) as destination for SmartConnector for cloud log collection/forwarding

IBM Data Power not supported with Arcsight Integration

Array Device Not supported with Arcsight Integration

Silver Peak Device Not Supported with Arcsight Integration

ESM is not using SMTP Authentication while sending email.

Nutanix Device Integration with Arcsight

Remove artificial limit on number of entries returned from active list

Support Cyber Reason Integration with ArcSight ESM

Digitally signed patches

Support Ubuntu/Debian

Resources