Has anybody managed to collect data from McAfee Web Gateway 7.3.1. I have tried the SmartConnector for McAfee Web Gateway but this seems to support up to 6.8 only. The data is parsed incorrectly and only appears in the message field.
Is a flexconnector a better option?
Thanks in advance.
We have arcsight 4.5 version and also have same problem about parsing. All info is coming in a message and many of the fields are empty..I need a permanent solution.. I installed new smart connectors and took the McAfee logs on that connector, but still have the same problem.
Can you please share me the steps to integrate the McAfee Webgateway connector to ArcSight.
1. How you push the logs from McAfee Web GT 7.3 to smart connector server. (Syslog push or FTP or any other)
2. Is there any supporting connector is available for McAfee web GT 7.3 version.
We are integrating mcafee webgateway 7.3 and foungd out that except virusfound logs none of the other logs are parsing.
Could you please let us know how did you manage to use syslog connector in this case.
It would be really helpful if you can share the details