Integration with Siem Archsight

[DCIM_Support]

Hi All,

How can i integrate with Siem Archsight? Thanks for all supports.

Regards

Kerem

(CID:105457525)

[DCIM_Support]

Hello Kerem, Can you please elaborate on the system that you are looking to integrate with StruxureWare? I am not aware of that system nor can I speak what communication method of Siem Archsight. Thanks Victor

(CID:105457568)

[DCIM_Support]

Hi Kerem, are you talking about HP Security Information and Event Management system? Can you also talk a little about the platform and use case or workflow, if you need events from ArcSight into DCO or DCE alarms to create events in ArcSight?

(CID:105457576)

[DCIM_Support]

Hi Victor, Hi Ajay, HP Security Information and Event Management needs some logs from DCO and DCE. For example; who is log in? who changed the thresholds? Do you have any information for that integration? Regards Kerem

(CID:105457618)

[DCIM_Support · Accepted solution]

I believe DCO Audit Trail report has the information you are looking for. This information is not available via ETL or an API right now, but the report can be run on a schedule and a custom ETL can push the report output data into SIEM ArcSight using their API. 
http://dcimsupport.apc.com/display/UAOp74/Audit+Trail+Report

(CID:105457628)

[DCIM_Support]

This question is closed for comments. You're welcome to start a new topic if you have further comments on this issue.