ArcSight FlexConnector Configuration provides you with an overview of the ArcSight SmartConnectors framework and explains the ArcSight ESM Schema. It teaches you how to construct and manipulate FlexConnector configuration and property files and uses various parsing methods including fixed delimited, regular expressions, and database query. Examples from standard connectors are used to illustrate device-specific methodologies. Advanced configuration options such as multi-line Regex, parser linking, and conditional mapping are also covered.
Upon completion of this course, you should be able to:
- Install ArcSight Connector software, configure a functional FlexConnector, and test with an ESM Active Channel
- Use the FlexConnector Wizard to create fixed delimited configuration files
- Use the Regex Tester tool to create common and sub-message parsing and token-to-event mapping
- Create a tailored Categorization file for a parent FlexConnector and test its function in an active channel
- Navigate the connector configuration file hierarchy to locate, display, and edit.
To be successful in this course, you should have the following prerequisites or knowledge.
- Successful completion of ArcSight ESM Admin and Analyst course
- Successful completion of ArcSight ESM Advanced Administrator course
- Working knowledge of Regular Expressions
| COURSE FEATURES |
|---|
|
Lectures - 06 |
|
Videos Duration - 40 hours |
|
Skill level - All levels |
|
Language - English |
Note: Classroom & Virtual live Training includes Examprep Tools
Please fill out the form below to receive customized training as we are not currently offering this course in a classroom or Virtual live training.
Customized Training
1. Choose your training preference date 2. Virtual Live Group Training 3. Class Room Group Training 4. Class Room On-Site Group Training 5. Virtual Live1-1 Mentoring 6. Class Room 1-1 Mentoring