Description

To support newer device versions and to fix parser issues quickly, the connector framework and connector parser updates are now delivered as separate releases. The connector parser update releases will be released monthly on ArcSight Marketplace.

You can download parser releases to your workstation to be applied on standalone connectors, or, starting with ArcSight Management Center (ArcMC) version 2.7.0, for ease of upgrade and integration of locally/remotely managed connectors, you can use ArcMC to retrieve parser updates directly from ArcSight Marketplace.

Each connector parser release is supported and certified with a specific connector framework release.

NOTE: Unobfuscated parsers are available to download from ArcSight Software License and Downloads (SLD) pages, similar to other ArcSight product binary downloads.

Minimum Requirements

  • For details refer to the release notes.

Suggested apps

Suggested for you are based on app category, product compatibility, popularity, rating and newness. Some apps may not show based on entitlements. Learn more about entitlements.

Releases

Release
Size
Date
ArcSight-8.3.2.8777.0-ConnectorParsers.aup 8.3.2.8777.0
9.0 MB
  |  
Jun 7, 2022
More info Less info
Product compatibility
SmartConnector
Version 8.3
ESM
Version 7.2 · 7.3 · 7.4 · 7.5 · 7.6
Management Center (ArcMC)
Version 2.9
Version 3.0 · 3.1
Release notes

Note: This file includes the latest parser updates of the SmartConnectors currently supported and the latest unobfuscated cloud map files. The reference file name is ArcSight-ConnectorUnobfuscatedParsers-8.3.2.8777.0.zip. To obtain more information, go to Support > ArcSight Smart Connectors

SmartConnectors Support Recently added:

  • Added support for platform/version Check Point R81 modules for:

· New Anti-Virus

· Threat Extraction

· Anti-Bot

· Content Awareness

· Identity Awareness

  • Added support for platform/version VMWare ESX 7.0 modules for:

· apiForwarder

· cfgAgent

· esxtokend

· fdm

· hostd

· kmxa

· localcli

· nestdb-server

· nsxavim

· nsx-exporter

· nsx-opsagent

· nsx-proxy

· nsx-sfhc

· nsx-sha

· osfsd

· smartd

· vmkwarning

· Vpxa

· VSANMGMTSVC

Fixed issues and Enhancements:

· Symantec Endpoint Protection DB

· Fortinet Fortigate Syslog

· UNIX OS Syslog

· Microsoft DNS DGA Trace Log Multiple Server File

For complete release information, see the Release Notes and other documents available on the ArcSight SmartConnectors Documentation site.

Languages
English
ArcSight-8.3.1.8699.0-ConnectorParsers.aup 8.3.1.8699.0
9.0 MB
  |  
May 2, 2022
More info Less info
Product compatibility
ESM
Version 7.2 · 7.3 · 7.4 · 7.5 · 7.6
SmartConnector
Version 8.3
Management Center (ArcMC)
Version 2.9
Version 3.0 · 3.1
Release notes

Note: This file includes the latest parser updates of the SmartConnectors currently supported and the latest unobfuscated cloud map files. The reference file name is ArcSight-ConnectorUnobfuscatedParsers-8.3.1.8699.0.zip. To obtain more information, go to Support > ArcSight Smart Connectors
SmartConnectors Support Recently added:
• Added support for platform/version IAM Access Analyzer Service for: AWS Security Hub
• Added support for platform/version Check Point R81 modules for:
o Anti-Malware
o Application Control
o System Monitor
o VPN-1 & FireWall-1
o HTTPS Inspection
o Security Gateway/ Management
o Smart Console
o Smart Defense
o URL Filtering
o Threat Emulation
• Added support for platform/version VMWare ESX 7.0 modules for:
o sensord
o Vsansystem
o hostd-probe
o Rhttpproxy
o Clomd
o nsx-opsagent
o kmxa
o vmkernel
Fixed issues and Enhancements:
• Cisco IOS Syslog
• Cisco IronPort Email Security
• Cisco Wireless LAN Controller Syslog
• Citrix NetScaler
• Intersect Alliance SNARE Syslog
• Linux Audit File
• Microsoft 365 Defender
• Microsoft Office 365 Management Activity
• Microsoft Windows Event Log – Native
• Pulse Secure Pulse Connect Secure Syslog

For complete release information, see the Release Notes and other documents available on the ArcSight SmartConnectors Documentation site.

Languages
English
ArcSight-8.2.2.8532.0-ConnectorParsers.aup 8.2.2.8532.0
8.9 MB
  |  
Dec 15, 2021
More info Less info
Product compatibility
ESM
Version 7.2 · 7.3 · 7.4 · 7.5
SmartConnector
Version 8.2
Management Center (ArcMC)
Version 2.9
Version 3.0
Release notes

8.2.2.8532.0 Version InformationNote: This file includes the latest parser updates of the SmartConnectors currently supported. To obtain more information, go to Support > ArcSight Smart Connectors

SmartConnectors Support Recently added:

  • Added support for platform/version RHEL 8.3 for: UNIX OS Syslog
  • Added support for platform/version RHEL 8.4 for:
    • Linux Audit File
    • Linux Audit Syslog
    • UNIX Login/Logout File

Fixed issues and Enhancements:

  • Amazon Web Services S3
  • Cisco IOS Syslog
  • Cisco NX-OS Syslog
  • Citrix NetScaler Syslog
  • McAfee Network Security Manager Syslog
  • Microsoft Windows Event Log – Native: Active Directory
  • Oracle Audit Syslog
  • Symantec Endpoint Protection DB
  • Symantec Endpoint Protection Syslog
  • UNIX OS Syslog

For complete release information, see the Release Notes and other documents available on the ArcSight SmartConnectors Documentation site.

Languages
English
ArcSight-8.2.1.8469.0-ConnectorParsers.aup 8.2.1.8469.0
8.9 MB
  |  
Aug 11, 2021
More info Less info
Product compatibility
ESM
Version 7.2 · 7.3 · 7.4 · 7.5
SmartConnector
Version 8.2
Management Center (ArcMC)
Version 2.9
Version 3.0
Release notes

8.2.1.8469.0 Version Information

Note: This file includes the latest parser updates of the SmartConnectors currently supported. To obtain more information, go to Support > ArcSight Smart Connectors

SmartConnectors Support Recently added:

  • Check Point Syslog, added support for Check Point version R80.30.
  • Added support for platform/version RHEL 8.3 for:
    • Linux Audit File
    • Linux Audit Syslog
    • UNIX Login/Logout File

Fixed issues and Enhancements:

  • All SmartConnectors
  • Box Connector
  • FlexConnectors
  • McAfee ePolicy Orchestrator DB
  • MS IIS Multiple Server File
  • Pulse Secure Pulse Connect Secure Syslog
  • Symantec Endpoint Protection DB
  • UNIX OS Syslog

For complete release information, see the Release Notes and other documents available on the ArcSight SmartConnectors Documentation site.

Languages
English
ArcSight-8.1.3.8422.0-ConnectorParsers.aup 8.1.3.8422.0
8.9 MB
  |  
Feb 19, 2021
More info Less info
Product compatibility
ESM
Version 7.0 · 7.2 · 7.3 · 7.1 · 7.4
SmartConnector
Version 8.1
Management Center (ArcMC)
Version 2.7 · 2.8 · 2.9
Transformation Hub
Version 3.0 · 3.1 · 3.2 · 3.3 · 3.4
Release notes

8.1.3.8422.0 version information

Note: This file includes the latest parser updates of the SmartConnectors currently supported. To obtain more information, go to softwaresupport.softwaregrp.com

SmartConnectors Support Recently added:

  • Syslog NG Daemon, added support for Checkpoint Gaia OS Syslog.
  • All SmartConnectors, added support fora a new type of Arbor logs.

Fixed issues and Enhancements:

  • Amazon Web Services CloudTrail
  • Cisco ASA Syslog
  • Cisco NX-OS Syslog
  • Cisco Wireless LAN Controller Syslog
  • HPE OpenVMS File
  • IBM AIX Audit Syslog
  • MS Windows Event Log Native
  • MS Windows Event Log Native Security Event Mappings
  • Symantec Endpoint Protection DB
  • UNIX OS Syslog

For complete release information, see the Release Notes available from the Micro Focus Software Community at:https://community.microfocus.com/t5/ArcSight-Connectors/ct-p/ConnectorsDocs

Languages
English
ArcSight-8.1.2.8416.0-ConnectorParsers.aup 8.1.2.8416.0
8.9 MB
  |  
Jan 22, 2021
More info Less info
Product compatibility
ESM
Version 7.0 · 7.2 · 7.3 · 7.1 · 7.4 · 7.5 · 7.6
SmartConnector
Version 8.1
Management Center (ArcMC)
Version 2.7 · 2.8 · 2.9
Release notes

8.1.2.8416.0 version information

Note: This file includes the latest parser updates of the SmartConnectors currently supported. To obtain more information, go to softwaresupport.softwaregrp.com

SmartConnectors Support Recently added:

  • Box, added support to the following event types:
    • CHANGE_ADMIN_ROLE
    • ADMIN_LOGIN
    • GROUP_ADD_USER
    • GROUP_REMOVE_USER
    • USER_AUTHENTICATE_OAUTH2_TOKEN_
    • REFRESH
  • Fixed issues and Enhancements:
    • Juniper JUNOS Syslog
    • Microsoft Office 365 Management Activity
    • Unix Syslog Connectors


For complete release information, see the Release Notes available from the Micro Focus Software Community at:https://community.microfocus.com/t5/ArcSight-Connectors/ct-p/ConnectorsDocs

Languages
English
ArcSight-8.1.1.8412.0-ConnectorParsers.aup 8.1.1.8412.0
8.9 MB
  |  
Dec 17, 2020
More info Less info
Product compatibility
ESM
Version 7.0 · 7.2 · 7.3 · 7.1 · 7.4 · 7.5 · 7.6
SmartConnector
Version 8.1
Management Center (ArcMC)
Version 2.7 · 2.8 · 2.9
Release notes

8.1.1.8412.0 version information

Note: This file includes the latest parser updates of the SmartConnectors currently supported. To obtain more information, go to softwaresupport.softwaregrp.com

SmartConnectors Support Recently added:

  • Microsoft Windows Event Log Native, added support for ADFS Auditing Events on Windows Server 2016 and 2019.
  • Cisco ASA Syslog, addedsupport to Cisco Firepower version 6.3.
  • Cisco IronPort Email Security Appliance Syslog, added support to some events that were not being parsed correctly.
  • HPE H3C Syslog, added support to some events that were not being parsed correctly.
  • UNIX OS Syslog, added partial support for RHEL 8.2.

Fixed issues and Enhancements:

  • Cisco ASA Syslog
  • Cisco ISE Syslog
  • Cisco NX-OS Syslog
  • HPE Integrated Lights-Out Syslog
  • Microsoft Windows Event Log Native
  • Oracle Audit Syslog
  • Pulse Secure Pulse Connect Secure Syslog
  • Symantec Endpoint Protection Syslog

For complete release information, see the Release Notes available from the Micro Focus Software Community at:https://community.microfocus.com/t5/ArcSight-Connectors/ct-p/ConnectorsDocs

Languages
English

Resources

Unsubscribe from notifications

You are receiving release updates for this item because you have subscribed to the following products:
If you unsubscribe, you will no longer receive any notifications for these products.
Tip: to update your subscription preferences, go to Manage Subscriptions from your Dashboard, uncheck the products you no longer want to receive notifications for, and click 'Save'.

Marketplace Terms of Service

In order to continue, you must accept the updated Marketplace Terms of Service.
Since you are downloading an app from the Micro Focus Marketplace, you need to accept the updated Marketplace Terms of Service before you can continue. Use the link to review the Marketplace Terms of Service. Once complete check the, "I accept the Marketplace Terms of Service" box below and click accept to continue your download.


Your download has begun...

Your download has begun

Related content and resources

Your browser is not supported!

Please upgrade to one of the following broswers: Internet Explorer 11 (or greater) or the latest version of Chrome or Firefox

release-rel-2022-6-2-4916 | Thu Jun 23 00:32:11 PDT 2022