BSM and ArcSight Logger Connector

I am struggling ot understand the concept, and therefore determine how to get events from ArcSight Logger into OMi. Having read the documentation, it appears that you have to:

 

1. Setup event integration from BSM to ArcSight. How would you define this?

2. Set up a trrusted relationship between BSM and the ArcSight Logger host. How is this done? The ArcSight Logger is a CentOS box, and has no HPOA installed.....

 

3. Install the BSM ArcSight Connector. Really? How is that done? Is the ArcSight one a Remote or Local Connector install?

 

I don't seem to have any document that deals speoicifically with integration of the ArcSight Logger app into BSM. Is there one?

 

Really struggling here, so appreciate any and all feedback.

 

 

 

 

 

 

Parents
  • Here are high level steps you need to take to integrate events from ArcSight Logger into BSM/OMi. Specific details for every step below can be found in appropriate manuals (either BSM or ArcSight).

     

    Prerequisites:

    Make sure you have BSM up and running, ArcSight Logger up and running, BSM Connector up and running (and integrated with your BSM).

     

    1. Download ArcSight Logger Forwarding Connector for BSM/OMi.

    2. Install this connector on a server which has connection to both BSM connector and ArcSight Logger server.

    3. Navigate to ArcSight Logger and configure which events should be forwarded to BSM through the Forwarding Connector you installed at step 2.

    4. Download ArcSight OM/OMi SNMP Interceptor policy (from the same place where you got the forwarding connector).

    5. Upload and enable the policy in BSM Connector UI.

     

    That's it. Now if you did everything correctly events from ArcSight Logger should appear in OMi Event Browser.

  • Does BSM Connector get installed on the BSM box, or the Arcsight box?
  • Anyone?

    Does BSM Connector get installed on the BSM box, or the Arcsight box?
  • >>>Does BSM Connector get installed on the BSM box, or the Arcsight box?

     

    BSMC is supposed to be installed on its own dedicated box. You cannot install it on any BSM server - it won't work. Mixing it with ArcSight Logger was never tested either, though it may work.

  • >>>Does BSM Connector get installed on the BSM box, or the Arcsight box?

     

    BSMC is supposed to be installed on its own dedicated box. You cannot install it on any BSM server - it won't work. Mixing it with ArcSight Logger was never tested either, though it may work.

  • >>>Does BSM Connector get installed on the BSM box, or the Arcsight box?

     

    BSMC is supposed to be installed on its own dedicated box. You cannot install it on any BSM server - it won't work. Mixing it with ArcSight Logger was never tested either, though it may work.

  • here are the steps in a nutshell. 

     

    ArcSight Logger server (dedicated box)

     

    BSM/OMi 9.2x server (dedicated box)

     

    BSM Connector Server (dedicated box)

     

    ArcSight Forward Connector software (can be installed any server)

     

     

     

    1. Download ArcSight Logger Forwarding Connector from BSM/OMi from support site under my downloads

     

    HP_ArcSight_Logger_Forwarding_Connector_for_BSM_Logger-Forwarding-Connector-for-BSM

     

    From  Support site under ArcSight

     

    2. Install to server which has connection to both BSM connector and ArcSight Logger server. Pay attention to two screens.

     

    This should be name or IP address of your BSM connector. If you have installed on same server as BSM connector it can be local host.

     

    3. Go to ArcSight Logger server user interface, go to ArcSight server user interface, Configuration > Event  Output

     

    4.  Configure ArcSight Forward Event Connector server  as your target server port 514 as your destination.

     

    Be carefully about your filter, it can generate  to many events.

     

    5. Download the latest policy files from the ArcSight download site where you obtained the connector.

     

    Refer to the ArcSightTm HP M and HP OMi SNMP Interceptor Policy Readme for details on

    uploading the template.

     

    6. Go to  BSM connector user interface and upload policy

     

    7. Go to BSM/OMi user interface to verify event are arriving to  BSM

     

    Check from ArcSight Logger user interface to make sure events are collected by Logger and forwarded to  BSM.

     

     

    Hope this helps,
    PatW

  • Pat,

     

    Sorry for not responding sooner, it has been a bit mental here trying to fix this! I finally got the BSMC installed and working, and added to the BSM config. Excellent. A step closer.

     

    Trying to get HP to give me the Arcsight software and docs, as I don't have an Arcsight account, which you need....

Reply Children
No Data