Big news! The community will be moving to a new platform April 21. Read more.
Big news! The community will be moving to a new platform April 21. Read more.
Lieutenant
Lieutenant
1031 views

how to get a report of devices reporting to ESM

Hello,

I need help on creating a report to get the list of devices reporting to ESM for period of time.

 

0 Likes
3 Replies
Captain Captain
Captain

Hi,

"deviceEventClassId=agent:043" will give the list of devices reporting to the connector.

Create a Light Weight rule to populate an active list and take the report from list.

You need to enable "Enable Device Status Monitoring" in connector configuration to get agent:043 events.

Regards,

Sumanth.

0 Likes
Fleet Admiral
Fleet Admiral

Just to add on this, as i use the same approach as Sumanth described, there is also a list of this already made by ArcSight with their built-in device monitoring, even if you do not use it, the list is there.

So if you got to ActiveList, ArcSight Administration, Devices, and check the content of the list of All Devices, you should be able to see a complete list as well.

-----------------------------------------------------------------------------------------
All topics and replies made is based on my personal opinion, viewpoint and experience, it does not represent the viewpoints of MicroFocus.
All replies is based on best effort, and can not be taken as official support replies.
//Marius
0 Likes
Micro Focus Expert
Micro Focus Expert

Hi,

In addition, you may find this HOWTO article useful too:

https://community.softwaregrp.com/t5/ArcSight-User-Discussions/HOW-TO-Device-Status-Monitoring-with-ESM-Detailed-Explanation/m-p/1594333#M6998

Thanks and regards,

Darren

ArcSight Support
If you find that this or any post resolves your issue, please be sure to mark it as an accepted solution.
0 Likes
The opinions expressed above are the personal opinions of the authors, not of Micro Focus. By using this site, you accept the Terms of Use and Rules of Participation. Certain versions of content ("Material") accessible here may contain branding from Hewlett-Packard Company (now HP Inc.) and Hewlett Packard Enterprise Company. As of September 1, 2017, the Material is now offered by Micro Focus, a separately owned and operated company. Any reference to the HP and Hewlett Packard Enterprise/HPE marks is historical in nature, and the HP and Hewlett Packard Enterprise/HPE marks are the property of their respective owners.