Page tree

Contents

You can verify if the data that is transferred from the Data Connector has reached the Micro Focus ArcSight ESM destination in real-time. The Data Connector transfers DNS queries and logs to the Micro Focus SmartConnector from where it is forwarded to the Micro Focus ArcSight Manager. The ArcSight Manager displays the following information as soon as the data arrives at the destination.

Configuring Micro Focus SmartConnector to Communicate with the Data Connector

You must specify the following in the SmartConnector to receive data from the Data Connector:

  1. Execute the program ArcSight-<version string>-connector to add a SmartConnector.
  2. Select the folder where you want to install the ArcSight SmartConnector and click Next.
  3. Select the folder where you want to create links and click Next
  4. Review the information and click Install to confirm or Previous to go back.
  5. After the SmartConnector is installed successfully, the Connector Setup wizard appears as shown in the following image. Select Add a Connector and click Next >.
  6. Set Type to Syslog NG Daemon and click Next >.
  7. Enter the following details and click Next >

    • Network Port: Enter the same port number that was mentioned while configuring destination in the Data Connector.
    • IP Address: Enter the IP address of the Data Connector.
    • Protocol: Select TLS from the drop-down list to use TLS encryption protocol for syslog.
  8. Select ArcSight Manager (encrypted) and click Next >.
  9. Enter the IP address and port number of the ArcSight Manager, and other necessary credentials. Click Next >.
  10. Complete the rest of the installation as per the installation wizard.

For more information, refer to the Micro Focus ArcSight ESM documentation.


  • No labels

This page has no comments.