CA Service Desk Integration
I've been searching for a way to integrate ArcSight Correlated events into CA service desk and know that it's possible but i'm unsure of the steps I would need to take in order to set this up correctly. I believe that the CA service desk system uses XML to import the information but i'm unsure how to go about this. Would someone be able to provide any additional help with the process that would take place after I've created a rule to send the event to CA?
Re: CA Service Desk Integration
You can use the 'actions' tab in the rules to do that.
Choose 'Export to external system' as the action you wish to preform when a rule fires.
An XML file will be created under '/home/archive/exports' on the Manager server.
CA can automatically import those XML files as tickets.
There's a lot of info about this in previous posts:
Feel free to contact at any time,
Visit us: http://www.wemeansecurity.com