Fleet Admiral
Fleet Admiral
7954 views

ArcSight Flexconnector Training V2.pdf

Hi Friends,

Flex Connector Development Basic Training Guide Version 02 prepared from the Flex Development Guide and other Multiple Discussions/Documents.

The Following Topics are Covered in this Flex Connector Training Materials. Hope this will be Useful for you all.

Introduction:
  • Brief about Flex.
  • Types of Flex Connector and related Parameters.
  • Sample Examples.
  • Detailed Configuration File Structure Topics.
Basic Flex Concepts:
  • Declaring Regex and Configuring FlexAgentWizard /Regex Wizard.
  • Token Declaration and its Types.
  • Event Mapping
  • Severity Mapping
  • Understanding The Parser Expression Usage
  • Understanding the Regex Usage
  • Few Examples on Different Flex Types

Little Advanced Concepts of Flex:
  • Submessages
  • Conditional Mapping.
  • Extra Processor
  • Multi-Line Regex           
  • Parser Overrides.
  • Extra Mapping Files.
  • Merge operations.
  • Custom Categorizations.
  • Key Value Parsers
  • Creating Map Files.
  • Defining deviceEventClassId.
  • Additional Data Mapping
  • CounterACT Connector.
  • REST API
  • Flex Active List Import
  • Flex Asset Import
  • Few Sample Agent Property file Important Configurations.
  • Other Useful Files (Token Operations List, ArcSight CEF Fields….)




Thanks and Regards,

Balahasan V.


Labels (2)
Tags (1)
26 Replies
Fleet Admiral
Fleet Admiral

This is a very cool!

0 Likes
Fleet Admiral
Fleet Admiral

Thanks Petrov 

0 Likes
Cadet 1st Class
Cadet 1st Class

Great and very helpful document. Thank you!

0 Likes
Absent Member.
Absent Member.

Very nice and quite useful.  Good job.

0 Likes
Absent Member.
Absent Member.

Nice Job

0 Likes
Fleet Admiral
Fleet Admiral

Thanks Putnikovic, Murphy, Security Specialist(TC)

0 Likes
Absent Member.
Absent Member.

Great document

0 Likes
Absent Member.
Absent Member.

Great and very helpful document. Thank you!

0 Likes
Fleet Admiral
Fleet Admiral

Thanks Helmy and Pravin

0 Likes
Absent Member.
Absent Member.

Thank you for this; it is very informative!

0 Likes
Absent Member.. Absent Member..
Absent Member..

Thanks Balahasan For your great efforts

0 Likes
The opinions expressed above are the personal opinions of the authors, not of Micro Focus. By using this site, you accept the Terms of Use and Rules of Participation. Certain versions of content ("Material") accessible here may contain branding from Hewlett-Packard Company (now HP Inc.) and Hewlett Packard Enterprise Company. As of September 1, 2017, the Material is now offered by Micro Focus, a separately owned and operated company. Any reference to the HP and Hewlett Packard Enterprise/HPE marks is historical in nature, and the HP and Hewlett Packard Enterprise/HPE marks are the property of their respective owners.