I'm new to Arcsight and it's products and am trying to install SmartConnector software onto a laptop and configure it to forward event logs into logger however when I run SmartConnector it seems to open a command prompt.
I am assuming some of the fields have been entered incorrectly and have therefore tried to uninstall the software to reenter the data but upon installation I cannot return to the stage where I am required to enter details such as Host Name, Device location etc.
Is there a way to competely remove all files and folders of ArcSight SmartConnectors?
Yep, just delete the whole directory - it's all self-contained.
However, it sounds like you're clicking on an icon. The best way to do anything with the connector when you're not trying to run it as a service is open a command prompt, navigate to the connector's 'bin' directory, then run "arcsight blah" where blah is what you want to do.
It sounds like the two you'll need most are:
$CONNECTOR_HOME/current/bin/arcsight agents <-- This will start the connector
$CONNECTOR_HOME/current/bin/arcsight agentsetup -w <-- this is the configuration wizard
Replace $CONNECTOR_HOME with where your connector is located.
Thanks for replying, the folders that remain once it is uninstalled are:
program files > ArcsightSmartConnectors>Current>Agentdata
Should I go ahead and erase the Arcsight folder, would this result in removing the entire directory?