ASFC160 – ArcSight FlexConnector Configuration

Course code: ASFC16070

ArcSight FlexConnector Configuration provides you with an overview of the ArcSight SmartConnectors framework and explains the ArcSight ESM Schema. It teaches you how to construct and manipulate FlexConnector configuration and property files and use various parsing methods including fixed delimited, regular expressions, syslog, and JSON. Examples from standard connectors are used to illustrate device- specific methodologies. Advanced configuration options such as multi-line Regex, parser linking and conditional mapping are also covered

2 412 EUR

2 919 EUR including VAT

The earliest date from 08.04.2024

Selection of dates
onas
Do you have a question?
+420 731 175 867 edu@edutrainings.cz

Professional
and certified lecturers

Internationally
recognized certifications

Wide range of technical
and soft skills courses

Great customer
service

Making courses
exactly to measure your needs

Course dates

Starting date: 08.04.2024

Type: Virtual

Course duration: 3 days

Language: en

Price without VAT: 2 412 EUR

Register

Starting date: 16.09.2024

Type: Virtual

Course duration: 3 days

Language: en

Price without VAT: 2 412 EUR

Register

Starting date: Upon request

Type: Upon request

Course duration: 3 days

Language: en

Price without VAT: 2 412 EUR

Register

Starting
date
Place
Type Course
duration
Language Price without VAT
08.04.2024 Virtual 3 days en 2 412 EUR Register
16.09.2024 Virtual 3 days en 2 412 EUR Register
Upon request Upon request 3 days en 2 412 EUR Register
G Guaranteed course

Didn't find a suitable date?

Write to us about listing an alternative tailor-made date.

Contact

Target group

This intermediate level course is intended primarily for security administrators, content authors/architects and IT integrators, who build and install custom connectors to provide critical event data feeds to ArcSight ESM or Logger. This can include senior analysts for networks, security systems, enterprise applications and databases.

Course structure

Upon completion of this course, you should be able to:

  • Install ArcSight Connector software, configure a functional FlexConnector, and test with an ESM Active Channel
  • Use the FlexConnector Wizard to create fixed delimited configuration files
  • Use the Regex Tester tool to create common and sub-message parsing and token-to-event mapping
  • Create a tailored Categorization file for a parent FlexConnector and test its function in an active channel
  • Navigate the connector configuration file hierarchy to locate, display and edit

Prerequisites

To be successful in this course, you should have the following prerequisites or
knowledge.

  • Successful completion of ArcSight ESM Admin and Analyst course
  • Successful completion of ArcSight ESM Advanced Administrator course
  • Working knowledge of Regular Expressions

Do you need advice or a tailor-made course?

onas

product support

Follow-up courses

ARCMC250 – ArcSight Management Center Administration and Operations en/cz

Vendor: Micro Focus

Area: Security / Monitoring

Price from

2 412 EUR without VAT

ComGate payment gateway MasterCard Logo Visa logo