Having problems with your account or logging in?
A lot of changes are happening in the community right now. Some may affect you. READ MORE HERE
el_mejor_ajo1 Absent Member.
Absent Member.

audit connector configuration changes


Does anyone know how to check which user applied a configuration change to a connector in the logging received by ArcSight?

I do know you can get that info from the 'Get Configuratin XML File'. However that makes it hard to write any content on.

The event 'Agent configuration change received' ( Device Event Class ID = agent:032 AND Device Event Category = /Agent/Configuration/Changed )

does not contain this info, nor does any event triggered by this event.

How would one show to mgmt when changes have been pushed and by whom, using standard usage of resources?

thanks a bunch.

el mejor ajo

Labels (1)
The opinions expressed above are the personal opinions of the authors, not of Micro Focus. By using this site, you accept the Terms of Use and Rules of Participation. Certain versions of content ("Material") accessible here may contain branding from Hewlett-Packard Company (now HP Inc.) and Hewlett Packard Enterprise Company. As of September 1, 2017, the Material is now offered by Micro Focus, a separately owned and operated company. Any reference to the HP and Hewlett Packard Enterprise/HPE marks is historical in nature, and the HP and Hewlett Packard Enterprise/HPE marks are the property of their respective owners.