
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Email to a Friend
- Report Inappropriate Content
Smartconnector install config
Hi All
I have sentinel 8.2.3 server and want to learn to use SmartConnector to Parsing event.
But I never learn arcsight product...so I do not know How to confiure SmartConnector...Specially configure for Connect Sentinel.
Do we have any document let me learn SmartConnector parameter to connect sentinel ?
thanks!!
wyldkao

- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Email to a Friend
- Report Inappropriate Content
Re: Smartconnector install config
See the documentation for the Universal CEF collector: https://www.netiq.com/support/sentinel/plugins/prod/collectors/Universal_Common-Event-Format_2011.1r2.html#EventSourceConfiguration_section

- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Email to a Friend
- Report Inappropriate Content
Re: Smartconnector install config
Besides the URL provided already you can try this PDF.
Not everything maps if the device is not 'Fully Supported'. However, CEF is easy so you can map the fields. Also included a mapping example in the PDF.
ArcSight Configuration: <ARCSIGHT_HOME>/current/user/agent/agent.properties
JAVA Heap: <ARCSIGHT_HOME>/current/user/agent.wrapper.conf
Caching/QOS/etc: <ARCSIGHT_HOME>/current/user/agent/3******.xml
ArcSight Product Docs: https://community.microfocus.com/t5/ArcSight-Connectors/ct-p/ConnectorsDocs