Configuration Guide
SmartConnector™ for ArcSight Asset Import
May 15, 2012
Configuration Guide
SmartConnector™ for ArcSight Asset Import
May 15, 2012
Copyright © 2006 – 2012 Hewlett-Packard Development Company, L.P.Confidential computer software. Valid license from HP required for possession, use or copying. Consistent with FAR 12.211 and 12.212, Commercial Computer Software, Computer Software Documentation, and Technical Data for Commercial Items are licensed to the U.S. Government under vendor's standard commercial license.
The information contained herein is subject to change without notice. The only warranties for HP products and services are set forth in the express warranty statements accompanying such products and services. Nothing herein should be construed as constituting an additional warranty. HP shall not be liable for technical or editorial errors or omissions contained herein.
Follow this link to see a complete statement of ArcSight's copyrights, trademarks and acknowledgements:
www.arcsight/copyrightnotice.
The network information used in the examples in this document (including IP addresses and hostnames) is for illustration purposes only.
This document is confidential.
Revision History
Date Description
05/15/2012 Added new installation procedure.
02/11/2010 Added support for FIPS Suite B and CEF File transport.
08/01/2008 Update to installation procedure.
08/15/2007 General content update.
06/26/2007 Updated configuration information.
09/30/2006 Updated headers available table.
06/30/2006 Added Notes section.
03/17/2006 First edition of this configuration guide.
Configuration Guide SmartConnector for ArcSight Asset Import
The SmartConnector for ArcSight Asset Import is a tool for configuring the definitions that represent your network assets in ArcSight's network model. This configuration can be done manually on an asset-by-asset basis using the ArcSight ESM Console. However, if you have many assets that you want to model with the same distinctions, this tool lets you do so in a single batch rather than repeating the process for multiple assets.
This tool is not intended to address any asset scalability issues in currently released products (ArcSight
ESM 3.5 and prior ESM versions).
See the section "Device Event Mapping to ArcSight Data Fields" later in this document for the specific events mapped to fields in the ArcSight database.
Product Overview
The SmartConnector for Asset Import lets you define a comma-separated (.csv) file that imports asset modeling details in a batch. You can use this tool to assign asset categories to any of your network assets, as well as to those regulated by Sarbanes-Oxley compliance. The tool assigns existing asset categories, and also can be used to create and assign new categories.
If your asset inventory changes regularly, you can set up a process to update and export this list at regular intervals to update the assets in ArcSight ESM.
Depending upon your connector configuration, you can install the SmartConnector for Asset Import on a local asset host or on a dedicated connector server.
SmartConnector™ for ArcSight Asset Import
Install the SmartConnector
Before you install any SmartConnectors, make sure that the ArcSight products with which the
connectors will communicate have already been installed correctly (such as ArcSight ESM or ArcSight Logger). This configuration guide takes you through the installation process with ArcSight Manager (encrypted) as the destination.
For complete product information, read the Administrator's Guide as well as the Installation and
Configuration guide for your ArcSight product before installing a new SmartConnector. If you are
adding a connector to the Connector Appliance, see the ArcSight Connector Appliance Administrator's Guide for instructions, and start the installation procedure at step 3.
Before installing the SmartConnector, be sure the following are available:
⏹Local access to the machine where the SmartConnector is to be installed
⏹Administrator passwords
Unless specified otherwise at the beginning of this guide, this SmartConnector can be installed on all ArcSight supported platforms; for the complete list, see the SmartConnector Product and Platform Support document, available from the HP SSO and Protect 724 sites.
1Download the SmartConnector executable for your operating system from the HP SSO site.
2Start the SmartConnector Installer by running the executable.
Follow the installation wizard through the following folder selection tasks and installation of the core connector software:
Introduction
Choose Install Folder
Choose Install Set
Choose Shortcut Folder
Pre-Installation Summary
<
3When the installation of SmartConnector core component software is finished, the following window is displayed.
Configuration Guide
4Select Add a Connector and click Next.
5Select ArcSight Asset Import and click Next.
6Enter the required SmartConnector parameters to configure the SmartConnector, then click Next.
Parameter Description
Folder Enter the file path to the folder where the CSV files to be imported are stored (or browse to the directory in which the files to be imported are stored) for the connector to automatically
import the assets into ArcSight ESM. Verify that the directory specified as the connector
spring framework表达式assigndestination directory is dedicated as a repository for the Asset Import connector only. Any
files placed in this directory are processed by the connector and removed from the system.
版权声明:本站内容均来自互联网,仅供演示用,请勿用于商业和其他非法用途。如果侵犯了您的权益请与我们联系QQ:729038198,我们将在24小时内删除。
发表评论