ArcSight SmartConnector Parser Build 188.8.131.5229 is now available
Note about SmartConnector Releases
To support newer device versions and to fix parsing issues more rapidly, as of release v7.3.0, the connector framework and connector parser updates are now delivered as separate releases. The connector parser update builds will be released monthly on ArcSightMarketplace, whilst enhancements to the connector framework (including latest parser updates) are released on a three-monthly cycle and available as usual on the SSO Portal.
You can download parser releases to your workstation to be applied on standalone connectors, or for ease of upgrade and integration, starting with ArcSight Management Center (ArcMC) version 2.5, you can use ArcMC to retrieve parser releases directly from ArcSight Marketplace for locally/remotely managed connectors.
NB: Users of ArcMC pre v2.5 and all versions of ConnApp will need to upgrade to ArcMC v2.5 or later to benefit from the streamlined Parser Update deployment method described above.
Each connector parser release is supported and certified with the most recent connector framework release, thus:
- 7.5.1 and 7.5.2 Connector Parser builds will be supported and certified on the 7.5.0 Connector Framework
- 7.6.1, 7.6.2, 7.6.3 and 7.6.4 Connector Parser builds will be supported and certified on the 7.6.0 Connector Framework
And so on.
Parser Enhancements has been made for the following connectors:
- All Syslog
- Cisco ASA Syslog
- F5 BIG-IP Syslog
- Juniper JUNOS Syslog
- Linux Audit Syslog
- Pulse Secure Pulse Connect Secure Syslog
- IBM SiteProtector DB
- McAfee ePolicy Orchestrator DB
- Symantec Endpoint Protection DB
New Device, Component, or OS Version Support
- Check Point Syslog Modules: ESOD, Eventia Analyzer Server, Identity Logging, and VPN-1 Edge for R77.30
- F5 BIG-IP Access Policy Module (APM) 11.6
- Juniper JUNOS 15.1 MX Series Virtual Chassis (MX960 router)
- Linux Audit RHEL 6.7
- UNIX OS RHEL 6.7 and 7.3
There are many more parsing issues fixed and enhancements delivered with this release. Please read the SmartConnector Release Notes 184.108.40.20629 or additional information.
The SmartConnector datasheet listing the SmartConnectors can be download here.
Verify that you have a SmartConnector license before installing these connectors. The SmartConnector license entitlement is included within ADP, or else bundled with ESM or Logger if you have not yet migrated to the ADP licensing model.
You can find documentation and release notes on Protect 724 here.
If you have any questions, please contact Customer Support at: https://softwaresupport.mircofocus.com/.
Microfocus ArcSight SmartConnector Product Team
Please clarify, if the update is available on the Microfocus Download Portal or on HPE Download portal.
I tried to register on the Microfocus Download Portal and got this answer:
Thank you for contacting Micro Focus Supportline.
You can still use your normal HPE channels, however please go to https://softwaresupport.hpe.com
If you do not have an HPE Pass you will need to create one using Support Account ID SAID
Thank you, Ivo
1) Regarding ArcSight SmartConnector Parser Update you can also download it here (you will have to log in):
2) On the list I can see 7.6.4 available for download (oldest is 7.4.1).
I tried to register Microfocus SSO Download Portal, too and I received this answer:
ArcSight is a Heritage HPE Product. Support for this can be found at https://softwaresupport.hpe.com/ as SupportLine handles Heritage MicroFocus products.
I hope that there will be soon a unique and "simple to use" site for ArcSight software download, support, license registration and download.