Absent Member.. Absent Member..
Absent Member..
560 views

Arcsight Samrt Connectors

Jump to solution

Dear ALL,

Kindly Can We install more than one smart connector on the same workstation ?

Thanks,

BR,

Labels (3)
0 Likes
1 Solution

Accepted Solutions
Cadet 2nd Class Cadet 2nd Class
Cadet 2nd Class

Sure, but you need to install in different folder. If you required install Syslog Daemon, second Syslog Daemon need to select different port or protocol.

View solution in original post

0 Likes
4 Replies
Cadet 2nd Class Cadet 2nd Class
Cadet 2nd Class

Sure, but you need to install in different folder. If you required install Syslog Daemon, second Syslog Daemon need to select different port or protocol.

View solution in original post

0 Likes

I second Thoman's reply.  We run multiple connectors on virtual servers in a vm environment.  I would recommend though that you take into consideration what types of connectors you run together.  Some are more memory/cpu intensive than others.

Also ensure that whatever box you run them on you take into consideration the specs of the box.  I find that a dual cpu 6-8gb server os based box can usually run 4-6 connectors without any real issues depending on their EPS

0 Likes
Cadet 2nd Class Cadet 2nd Class
Cadet 2nd Class

Agreed to Andrew D'Albor, but if you collecting high EPS events, virtual server is not recommended, especially share resources virtual machine. For best practices, you should allocate 1 CPU core for each connector and minimum 1 CPU core for the OS, by default 256MB memory is used by each connector, but you may increase it.

0 Likes
Absent Member.
Absent Member.

Thoman and Andrew are correct. You need to select your hosts properly. I've had issues where I installed several (syslog, vulnerability scans and Oracle) connectors on one box. Some connectors (like vulnerability scan results) utilize considerable amount of space.

0 Likes
The opinions expressed above are the personal opinions of the authors, not of Micro Focus. By using this site, you accept the Terms of Use and Rules of Participation. Certain versions of content ("Material") accessible here may contain branding from Hewlett-Packard Company (now HP Inc.) and Hewlett Packard Enterprise Company. As of September 1, 2017, the Material is now offered by Micro Focus, a separately owned and operated company. Any reference to the HP and Hewlett Packard Enterprise/HPE marks is historical in nature, and the HP and Hewlett Packard Enterprise/HPE marks are the property of their respective owners.