UPDATE! The community will be go into read-only on April 19, 8am Pacific in preparation for migration on April 21. Read more.
UPDATE! The community will be go into read-only on April 19, 8am Pacific in preparation for migration on April 21.Read more.

Add more support to the SmartConnector for Amazon Web Services S3

Idea ID 2831470

Add more support to the SmartConnector for Amazon Web Services S3

0 Votes

It would be very good and quite easy if Micro Focus add the documentation on how to add you own flex parsers for this connector so one can reuse this S3 Connector for your own logs.

If MF also add the support of CEF files, then this could be the recommended way to bring down CEF logs created by Cloud based Smart/Flex Connectors.

1 Comment
Micro Focus Contributor
Micro Focus Contributor
Status changed to: Delivered

The AWS S3 connector is a generic connector, meaning it does not require specific parsers.  There is a document available for adding new parsers for AWS S3 hosted events.  I will send this to you.

Also, the support you've requested for CEF is available in our December 2020 release.  I've included an excerpt of our release notes below:

  • Additional event sources supported in AWS Security Hub cloud-native SmartConnector, with support for: Proxy, IP and Cloud firewall logs.  All log categories are now fully supported.
  • CEF, XML and XQuery log types are now supported by the AWS S3 cloud-native SmartConnector
  • Documentation is now available on how to add support for new parsers of events residing in AWS S3
  • Ability to delete non-CloudTrail messages

Thanks,

Wayne

The opinions expressed above are the personal opinions of the authors, not of Micro Focus. By using this site, you accept the Terms of Use and Rules of Participation. Certain versions of content ("Material") accessible here may contain branding from Hewlett-Packard Company (now HP Inc.) and Hewlett Packard Enterprise Company. As of September 1, 2017, the Material is now offered by Micro Focus, a separately owned and operated company. Any reference to the HP and Hewlett Packard Enterprise/HPE marks is historical in nature, and the HP and Hewlett Packard Enterprise/HPE marks are the property of their respective owners.