Welcome to the new Schneider Electric Community

It's your place to connect with experts and peers, get continuous support, and share knowledge.

  • Explore the new navigation for even easier access to your community.
  • Bookmark and use our new, easy-to-remember address (community.se.com).
  • Get ready for more content and an improved experience.

Contact SchneiderCommunity.Support@se.com if you have any questions.

Close
Invite a Co-worker
Send a co-worker an invite to the Exchange portal.Just enter their email address and we’ll connect them to register. After joining, they will belong to the same company.
Send Invite Cancel
84312members
353473posts

Integration with Siem Archsight

EcoStruxure IT forum

A support forum for Data Center Operation, Data Center Expert, and EcoStruxure IT product users to share knowledge on installation, configuration, and general product use.

Solved
DCIM_Support
Picard
Picard
0 Likes
5
383

Integration with Siem Archsight

This question was originally posted on DCIM Support by kerem.yilmaz on 2015-12-09


Hi All,

 

How can i integrate with Siem Archsight? Thanks for all supports.

 

Regards

Kerem

(CID:105457525)


Accepted Solutions
DCIM_Support
Picard
Picard
0 Likes
0
383

Re: Integration with Siem Archsight

This answer was originally posted on DCIM Support by Ajay Nagar on 2015-12-09


I believe DCO Audit Trail report has the information you are looking for. This information is not available via ETL or an API right now, but the report can be run on a schedule and a custom ETL can push the report output data into SIEM ArcSight using their API. 
http://dcimsupport.apc.com/display/UAOp74/Audit+Trail+Report

 

(CID:105457628)

See Answer In Context

5 Replies 5
DCIM_Support
Picard
Picard
0 Likes
0
383

Re: Integration with Siem Archsight

This comment was originally posted on DCIM Support by VSales on 2015-12-09


Hello Kerem, Can you please elaborate on the system that you are looking to integrate with StruxureWare? I am not aware of that system nor can I speak what communication method of Siem Archsight. Thanks Victor

(CID:105457568)

DCIM_Support
Picard
Picard
0 Likes
0
383

Re: Integration with Siem Archsight

This comment was originally posted on DCIM Support by Ajay Nagar on 2015-12-09


Hi Kerem, are you talking about HP Security Information and Event Management system? Can you also talk a little about the platform and use case or workflow, if you need events from ArcSight into DCO or DCE alarms to create events in ArcSight?

(CID:105457576)

DCIM_Support
Picard
Picard
0 Likes
0
383

Re: Integration with Siem Archsight

This comment was originally posted on DCIM Support by kerem.yilmaz on 2015-12-09


Hi Victor, Hi Ajay, HP Security Information and Event Management needs some logs from DCO and DCE. For example; who is log in? who changed the thresholds? Do you have any information for that integration? Regards Kerem

(CID:105457618)

DCIM_Support
Picard
Picard
0 Likes
0
384

Re: Integration with Siem Archsight

This answer was originally posted on DCIM Support by Ajay Nagar on 2015-12-09


I believe DCO Audit Trail report has the information you are looking for. This information is not available via ETL or an API right now, but the report can be run on a schedule and a custom ETL can push the report output data into SIEM ArcSight using their API. 
http://dcimsupport.apc.com/display/UAOp74/Audit+Trail+Report

 

(CID:105457628)

DCIM_Support
Picard
Picard
0 Likes
0
383

🔒 Closed

This question is closed for comments. You're welcome to start a new topic if you have further comments on this issue.