EcoStruxure IT forum
Schneider Electric support forum about installation and configuration for DCIM including EcoStruxure IT Expert, IT Advisor, Data Center Expert, and NetBotz
Link copied. Please paste this link to share this article on your social media post.
Posted: 2020-07-02 06:29 PM . Last Modified: 1 week ago
Hi All,
How can i integrate with Siem Archsight? Thanks for all supports.
Regards
Kerem
(CID:105457525)
Link copied. Please paste this link to share this article on your social media post.
Link copied. Please paste this link to share this article on your social media post.
Posted: 2020-07-02 06:29 PM . Last Modified: 1 week ago
I believe DCO Audit Trail report has the information you are looking for. This information is not available via ETL or an API right now, but the report can be run on a schedule and a custom ETL can push the report output data into SIEM ArcSight using their API.
http://dcimsupport.apc.com/display/UAOp74/Audit+Trail+Report
(CID:105457628)
Link copied. Please paste this link to share this article on your social media post.
Link copied. Please paste this link to share this article on your social media post.
Posted: 2020-07-02 06:29 PM . Last Modified: 1 week ago
Hello Kerem, Can you please elaborate on the system that you are looking to integrate with StruxureWare? I am not aware of that system nor can I speak what communication method of Siem Archsight. Thanks Victor
(CID:105457568)
Link copied. Please paste this link to share this article on your social media post.
Link copied. Please paste this link to share this article on your social media post.
Posted: 2020-07-02 06:29 PM . Last Modified: 1 week ago
Hi Kerem, are you talking about HP Security Information and Event Management system? Can you also talk a little about the platform and use case or workflow, if you need events from ArcSight into DCO or DCE alarms to create events in ArcSight?
(CID:105457576)
Link copied. Please paste this link to share this article on your social media post.
Link copied. Please paste this link to share this article on your social media post.
Posted: 2020-07-02 06:29 PM . Last Modified: 1 week ago
Hi Victor, Hi Ajay, HP Security Information and Event Management needs some logs from DCO and DCE. For example; who is log in? who changed the thresholds? Do you have any information for that integration? Regards Kerem
(CID:105457618)
Link copied. Please paste this link to share this article on your social media post.
Link copied. Please paste this link to share this article on your social media post.
Posted: 2020-07-02 06:29 PM . Last Modified: 1 week ago
I believe DCO Audit Trail report has the information you are looking for. This information is not available via ETL or an API right now, but the report can be run on a schedule and a custom ETL can push the report output data into SIEM ArcSight using their API.
http://dcimsupport.apc.com/display/UAOp74/Audit+Trail+Report
(CID:105457628)
Link copied. Please paste this link to share this article on your social media post.
Link copied. Please paste this link to share this article on your social media post.
Posted: 2020-07-02 06:29 PM . Last Modified: 2023-10-31 11:10 PM
This question is closed for comments. You're welcome to start a new topic if you have further comments on this issue.
Link copied. Please paste this link to share this article on your social media post.
Create your free account or log in to subscribe to the forum - and gain access to more than 10,000+ support articles along with insights from experts and peers.