how to get a report of devices reporting to ESM
I need help on creating a report to get the list of devices reporting to ESM for period of time.
"deviceEventClassId=agent:043" will give the list of devices reporting to the connector.
Create a Light Weight rule to populate an active list and take the report from list.
You need to enable "Enable Device Status Monitoring" in connector configuration to get agent:043 events.
Just to add on this, as i use the same approach as Sumanth described, there is also a list of this already made by ArcSight with their built-in device monitoring, even if you do not use it, the list is there.
So if you got to ActiveList, ArcSight Administration, Devices, and check the content of the list of All Devices, you should be able to see a complete list as well.
All topics and replies made is based on my personal opinion, viewpoint and experience, it does not represent the viewpoints of MicroFocus.
All replies is based on best effort, and can not be taken as official support replies.
In addition, you may find this HOWTO article useful too:
Thanks and regards,
If you find that this or any post resolves your issue, please be sure to mark it as an accepted solution.