Absent Member.
Absent Member.
204 views

bluvector & Centripetal connector.

Hi All,

Please let me know do we have a smart connector for "bluVector" and "Centripetal", We are in need of integrating it to Arcsight Express.

Thanks in advance.

Regards,

Punith.R

Labels (1)
0 Likes
3 Replies
Admiral
Admiral

0 Likes
Absent Member.
Absent Member.

Hi Moore,

Thanks for the links,

I have gone through it and was not able to find any information about "BluVector" and "Centripetal".

Regards,

Punith.R

0 Likes
Fleet Admiral
Fleet Admiral

The first port to check these things should always be the vendor themselves. This will fill in a lot of the gaps around what, how and where and is usually more accurate than anything else. We have a number of initiatives in place, such as CEF that we can provide support around. Vendors can choose to support CEF, certify to CEF or help us to produce a standard supported connector - there are varying efforts involved, but the deal is pretty obvious.

More and more, third-parties are going down the CEF route as its easier, simpler and less prone to errors (on all sides). In the case of these two sources, it seems that Centripetal DOES do CEF:

Centripetal Networks

In this case, follow up with them directly on how you configure their tool to generate CEF data. To receive CEF data, just use your Syslog SmartConnector.

For BluVector, this doesnt currently appear as a CEF supported source or as one that we directly support. In that case, I would look at getting a FlexConnector created for it. This will take a little planning but does not need to take that much effort to do. Steps would be around the following:

1) Check with BluVector what protocol they use and if they can tell you what the format is - for example Syslog, file etc

2) Check out the FlexConnector guide for some background on how to do this - ArcSight FlexConnector Developer's Guide

3) Take a look at the numerous guides on here - this is a great one from Ryan -

4) Any issues, drop a note back here and I am sure someone will help.

0 Likes
The opinions expressed above are the personal opinions of the authors, not of Micro Focus. By using this site, you accept the Terms of Use and Rules of Participation. Certain versions of content ("Material") accessible here may contain branding from Hewlett-Packard Company (now HP Inc.) and Hewlett Packard Enterprise Company. As of September 1, 2017, the Material is now offered by Micro Focus, a separately owned and operated company. Any reference to the HP and Hewlett Packard Enterprise/HPE marks is historical in nature, and the HP and Hewlett Packard Enterprise/HPE marks are the property of their respective owners.