ArcSight Activate Wiki Documentation

[john.robinson21]

Version 2.0.0.0

Reformatted layout of the wiki.

Published it on an Internet-facing server at https://hpe-sec.com/foswiki/bin/view/ArcSightActivate/WebHome

For comments and issues, please see the Official Activate Wiki Forum at

We plan on providing an export for those who prefer a private copy as soon as we have this version stabilized and have added some missing pieces from the migration of the old format. When we do finally publish it, we will post it at ArcSight | HPE Marketplace.

We have the export!!! It is available at https://marketplace.saas.hpe.com/arcsight/content/activate-framework-wiki. Apologies for the delay.

Version 1.0.10

Added documentation for Malware Solution Pack under Security Technology Monioring

Added documentation for McAfee ePO integration

Corrected various typos and screenshots throughout

Version 1.0.9

Updated the following Guides:

• Install guide Activate Base to the scripted process
• Install guide L1 Perimeter and Network Monitoring to the scripted process
• Install guide Tipping Point Unity One to the scripted process
• Install guide Websense to the scripted process
• Home page for Perimeter and OS solution to show process progression in headers

Collapsed ArcSight Packaging Topics

Corrected various typos and screenshots throughout

[john.robinson21]

So, will I be able to do a fresh install as of today?  I just tried and when trying to install the foswiki repos on page 10, it said that there are no foswiki repos available.

[prentice@hpe.co]

The FOSwiki repos are provided by the FOSwiki group, we don't have anything to do with that. If you read KMac's paper, it tells you how to get the FOSwiki installation files, I believe, and talks about the repos, but off the top of my head, I couldn't give you any better information.

[john.robinson21]

Ok, it may have been the version of CentOS i was using.  I did a fresh install with the iso recommended by Mary Cordova at the following post and it worked: 

[arosenfeld]

So my Wiki Activate Wiki 1.0.10 is the latest and greatest?

Guys, between Marketplace and Activate I'm getting a bit confused.  I was looking for documentation to install the the Activate PaloAlto content and found none either in the Wiki or in the download.

Any clarification would be helpful

[marens]

Hi John,

our Linux Administrator misses the documentation for Red Hat 7. Are there any plans to add it to the documentation soon?

[Emrah Alpa]

Hi all,

I have taken the liberty of documenting the deployment of Activate Wiki package on a foswiki VM package.

I show you how to:

1. download the Foswiki VM package from the official foswiki page
2. update hostname/IP address/passwords
3. deploy the Activate Wiki pages

Result is a VM you can deploy into your network, or keep on your local workstation, so it can be a local resource for you to review detailed Activate-related implementation instructions.

Download the PDF file:

• Dropbox - Foswiki_VM_Installation_Steps_for_Activate_Wiki_Documentation_v1.2.pdf

Please note: This is not an official document from HPE. Use at your own risk.

Thank you,

Emrah Alpa | BScEE, CISSP, C|EH
Solution Architect, Enterprise Security
Hewlett Packard Enterprise

[tawana2]

I see this link has https://hpe-sec.com/foswiki/bin/view/ArcSightActivate/WebHome Activate Wiki 2.0.0.0 - where can i download this version please??

[prentice@hpe.co]

Hey,

Apologies, we are still getting the Activate Wiki 2.0.0.0 stabilized. I may be a few weeks before we have a version that we can export it. Until then, please use the link you mentioned.