ASFC160 – ArcSight FlexConnector Configuration

Cieľová skupina

Táto časť nie je lokalizovaná

This intermediate level course is intended primarily for security administrators, content authors/architects and IT integrators, who build and install custom connectors to provide critical event data feeds to ArcSight ESM or Logger. This can include senior analysts for networks, security systems, enterprise applications and databases.

Štruktúra kurzu

Táto časť nie je lokalizovaná

Upon completion of this course, you should be able to:

• Install ArcSight Connector software, configure a functional FlexConnector, and test with an ESM Active Channel
• Use the FlexConnector Wizard to create fixed delimited configuration files
• Use the Regex Tester tool to create common and sub-message parsing and token-to-event mapping
• Create a tailored Categorization file for a parent FlexConnector and test its function in an active channel
• Navigate the connector configuration file hierarchy to locate, display and edit