TAYLLORCOX > Akademie > Micro Focus > ASFC160 – ArcSight FlexConnector Configuration

ASFC160 – ArcSight FlexConnector Configuration

ArcSight FlexConnector Configuration provides you with an overview of the ArcSight SmartConnectors framework and explains the ArcSight ESM Schema. It teaches you how to construct and manipulate FlexConnector configuration and property files and use various parsing methods including fixed delimited, regular expressions, syslog, and JSON. Examples from standard connectors are used to illustrate device- specific methodologies. Advanced configuration options such as multi-line Regex, parser linking and conditional mapping are also covered

Termíny
Target group
What will you learn
Prerequisites

Virtual Training nebo e-Learning?

Máme dostatečnou flexibilitu, takže vybírat můžete jak prezenční termíny, tak online kurzy.

Zkuste živý kurz virtuálně

Target group

This intermediate level course is intended primarily for security administrators, content authors/architects and IT integrators, who build and install custom connectors to provide critical event data feeds to ArcSight ESM or Logger. This can include senior analysts for networks, security systems, enterprise applications and databases.

What will you learn

Install ArcSight Connector software, configure a functional FlexConnector, and test with an ESM Active Channel
Use the FlexConnector Wizard to create fixed delimited configuration files
Use the Regex Tester tool to create common and sub-message parsing and token-to-event mapping
Create a tailored Categorization file for a parent FlexConnector and test its function in an active channel
Navigate the connector configuration file hierarchy to locate, display and edit