Description

To support newer device versions and to fix parser issues quickly, the connector framework and connector parser updates are now delivered as separate releases. The connector parser update releases will be released monthly on ArcSight Marketplace.

You can download parser releases to your workstation to be applied on standalone connectors, or, starting with ArcSight Management Center (ArcMC) version 2.7.0, for ease of upgrade and integration, you can use ArcMC to retrieve parser releases directly from ArcSight Marketplace for locally/remotely managed connectors.

Each connector parser release is supported and certified with a specific connector framework release. For example:

  • 8.0.1, 8.0.2 and 8.0.3 parser releases are supported with 8.0.0 SmartConnector Framework Release

Minimum Requirements


  • For details refer to the release notes.

Releases

Release
Size
Date
ArcSight-8.0.3.8356.0-ConnectorParsers.aup 8.0.3.8356.0
15.1 MB
  |  
Oct 13, 2020
More info Less info
Product compatibility
ESM
Version 7.0 · 7.2 · 7.3
SmartConnector
Version 8.0
Management Center (ArcMC)
Version 2.7 · 2.8 · 2.9
Transformation Hub
Version 3.0 · 3.1 · 3.2 · 3.3
Release notes

8.0.3.8356.0 version information

Note: This Parser releases contains unobfuscated file. This file includes latest parser updates of the Smart Connectors currently supported. To obtain more information, go to softwaresupport.softwaregrp.com.

SmartConnectors Support Recently added:

  • Microsoft Windows Event Log Native, added support for Microsoft Active Directory 2019 events on the Windows Event Log Native SmartConnector (WINC).

Fixed issues and Enhancements:

  • Cisco ISE Syslog
  • Citrix NetScaler Syslog
  • Microsoft Windows Event Log Native
  • Symantec Endpoint Protection Syslog

For complete release information, see the Release Notes available from the Micro Focus Software Community at:https://community.microfocus.com/t5/ArcSight-Connectors/ct-p/ConnectorsDocs

Languages
English
ArcSight-8.0.2.8340.0-ConnectorParsers.aup 8.0.2.8340.0
15.1 MB
  |  
Sep 16, 2020
More info Less info
Product compatibility
Management Center (ArcMC)
Version 2.7 · 2.8 · 2.9
Transformation Hub
Version 3.4 · 3.0 · 3.1 · 3.2 · 3.3
ESM
Version 7.0 · 7.2 · 7.3
Release notes

8.0.2.8340.0 version information

Note: This Parser releases contains unobfuscated file. This file includes latest parser updates of the Smart Connectors currently supported. To obtain more information, go to softwaresupport.softwaregrp.com.

SmartConnectors Support Recently added:

  • Microsoft Windows Event Log Native, added support for AppLocker events on Windows Server 2019.
  • Added support to the following event Ids: 102, 103, 105, 224, 225, 300, 301, 302, 330, 335, 455 and 641.
  • Linux Audit File, Linux Audit Syslog, and UNIX Login/Logout File, added support for RHEL 8.1 events.

Fixed issues and Enhancements:

  • Amazon Web Services S3
  • Arbor Networks Peakflow Syslog
  • Cisco NX-OS Syslog
  • IBM Security Access Manager Syslog
  • Juniper Firewall ScreenOS Syslog
  • Linux Audit Syslog
  • Microsoft DNS Trace Log Multiple Server File
  • Microsoft Office 365
  • Pulse Secure Pulse Connect Secure Syslog
  • UNIX OS Syslog
  • VMware ESXi Server Syslog
  • Zeek IDS NG File

For complete release information, see the Release Notes available from the Micro Focus Software Community at:https://community.microfocus.com/t5/ArcSight-Connectors/ct-p/ConnectorsDocs

Languages
English
ArcSight-8.0.1.8336.0-ConnectorParsers.aup 8.0.1.8336.0
15.0 MB
  |  
Aug 20, 2020
More info Less info
Product compatibility
SmartConnector
Version 8.0
Transformation Hub
Version 3.4 · 3.3 · 3.0 · 3.1 · 3.2
Release notes

8.0.1.8336.0 version information

Note: From August 2020 and on, Parser releases contains unobfuscated file. This file includes latest parser updates of the Smart Connectors currently supported. To obtain more information, go to softwaresupport.softwaregrp.com.

  • ArcSight-ConnectorUnobfuscatedParsers-8.0.1.8336.0.zip
  • ArcSight-ConnectorUnobfuscatedParsers-8.0.1.8336.0.zip.sig

SmartConnectors Support Recently added:

  • Bro IDS NG File, added support to the following Zeek 3.1.3 modules:-Conn, Dns, files,Http, ssl, weird, and x509.Added mappings for Support for Ja3 and Hash MD5 Hashes.
  • Cisco Secure ACS Syslog, added support for some new events of CSCOacs_ Passed_Authentications version 5.8.
  • McAfee ePolicy Orchestrator DB, added support to MOVE with ePO 5.10.
  • Microsoft Windows Event Log Native, added support for Windows Server 2019 events.

Fixed issues and Enhancements:

  • Amazon Web Services S3
  • Arbor Networks Peakflow Syslog
  • Blue Coat Proxy SG Multiple Server File
  • Bro IDS NG File
  • Cisco IronPort Web Security Appliance File Cisco IronPort Web Security Appliance Syslog
  • Cisco ISE Syslog
  • Cisco NX-OS Syslog
  • Fortinet Fortigate Syslog
  • IBM SiteProtector DB
  • ISC BIND Syslog
  • Juniper JUNOS Syslog
  • Juniper Network and Security Manager Syslog
  • Linux Audit Syslog
  • Oracle Audit Syslog
  • OVAL Vulnerability Scanner
  • Oracle WebLogic Server FileMicrosoft Windows Event Log Native
  • Proofpoint Enterprise Protection and Enterprise Privacy Syslog
  • Pulse Secure Pulse Connect Secure Syslog
  • Symantec Endpoint Protection DB

For complete release information, see the Release Notes available from the Micro Focus Software Community at:https://community.microfocus.com/t5/ArcSight-Connectors/ct-p/ConnectorsDocs

Languages
English
ArcSight-7.15.2.8312.0-ConnectorParsers.aup 7.15.2.8312.0
9.2 MB
  |  
Jun 17, 2020
More info Less info
Product compatibility
SmartConnector
Version 7.15.0
Management Center (ArcMC)
Version 2.7 · 2.8 · 2.9
Transformation Hub
Version 3.0 · 3.1
Release notes

7.15.2.8312.0 version information

SmartConnectors Support Recently added:

  • Check Point Syslog, added support for R80 FDE, R80 MEPP and R80 Endpoint Security Console.
  • Microsoft Office 365, Added support to Compliance events in Exchange & Data Insights REST API events.
  • Microsoft Windows Event Log Native:
    • Added support for Microsoft Windows Bits Client Event Log.
    • Added the following events:
      • Event 6
      • Event 8
    • Added support to ESENT application events.
    • Added the following events to Microsoft Sysmon Logs:
      • Event 14
      • Event 19
      • Event 20
      • Event 21
    • Added support for Microsoft-Windows-WMIActivity/Trace Log (only event Id 11).
    • Added support for Microsoft Windows-WMI-Analytic and Operational.

Fixed issues and Enhancements:

  • Cisco ASA Syslog
  • Cisco ISE Syslog
  • Dell SonicWALL Syslog
  • IP Flow (Netflow/J-Flow)
  • Microsoft Windows Event Log Native
  • VMware ESXi Server Syslog

For complete release information, see the Release Notes available from the Micro Focus Software Community at:https://community.microfocus.com/t5/ArcSight-Connectors/ct-p/ConnectorsDocs

Languages
English
ArcSight-7.15.1.8305.0-ConnectorParsers.aup 7.15.1.8305.0
9.2 MB
  |  
May 21, 2020
More info Less info
Product compatibility
SmartConnector
Version 7.15.0
Management Center (ArcMC)
Version 2.7 · 2.8 · 2.9
Transformation Hub
Version 3.0 · 3.1
Release notes

7.15.1.8305.0 version information

SmartConnectors Support Recently added:

  • IBM AIX Audit Syslog, added support for IBM AIX Audit syslog version 7.2.
  • Microsoft Windows Event Log Native, Added support to the following events:
    • Microsoft-Windows-Security-Auditing
    • Microsoft DNS Server Analytics

Fixed issues and Enhancements:

  • Check Point Syslog
  • Cisco ASA Syslog
  • Cisco ACS Syslog
  • Cisco Meraki Syslog
  • Cisco Wireless LAN Controller Syslog
  • Dell SonicWALL Syslog
  • HPE Integrated Lights-Out Syslog
  • Infoblox NIOS Syslog
  • Juniper Firewall ScreenOS Syslog
  • Juniper JUNOS Syslog
  • Linux Audit Syslog
  • McAfee ePolicy Orchestrator DB
  • Microsoft DNS Trace Log Multiple Server File
  • Microsoft Office 365
  • Microsoft Windows Event Log Native:
    • MS Sysmon Logs
    • Security Event Mappings
  • MS IIS Multiple Server File
  • Symantec Messaging Gateway Syslog
  • UNIX OS Syslog
  • VMware Web Services

For complete release information, see the Release Notes available from the Micro Focus Software Community at:https://community.microfocus.com/t5/ArcSight-Connectors/ct-p/ConnectorsDocs

Languages
English

Resources

Similar items

Similar apps are based on app category, product compatibility, popularity, rating and newness. Some apps may not show based on entitlements. Learn more about entitlements.

Unsubscribe from notifications

You are receiving release updates for this item because you have subscribed to the following products:
If you unsubscribe, you will no longer receive any notifications for these products.
Tip: to update your subscription preferences, go to Manage Subscriptions from your Dashboard, uncheck the products you no longer want to receive notifications for, and click 'Save'.

Marketplace Terms of Service

In order to continue, you must accept the Marketplace Terms of Service and Micro Focus Terms of Service
Since you are downloading an app from the Micro Focus unified Marketplace using an Access Manager account, you need to also accept the Micro Focus Marketplace Terms of Service before you can continue. Use the link to review the Marketplace Terms of Service. Once complete check the, "I accept the Marketplace Terms of Service and the Micro Focus Terms of Service" box below and click accept to continue your download.


Your download has begun...

Your download has begun

Related content and resources

Your browser is not supported!

Please upgrade to one of the following broswers: Internet Explorer 11 (or greater) or the latest version of Chrome or Firefox

release-rel-2020-10-2-3328 | Wed Oct 14 04:20:43 PDT 2020