Szkolenia Micro Focus

Cel szkolenia szkolenie zdalne - dlearning

ArcSight FlexConnector Configuration provides you with an overview of the ArcSight SmartConnectors framework and explains the ArcSight ESM Schema. It teaches you how to construct and manipulate FlexConnector configuration and property files and use various parsing methods including fixed delimited, regular expressions, and database query. Examples from standard connectors are used to illustrate device-specific methodologies. Advanced configuration options such as multi-line Regex, parser linking and conditional mapping are also covered.

Upon completion of this course, you should be able to:

  • Install ArcSight Connector software, configure a functional FlexConnector, and test with an ESM Active Channel
  • Use the FlexConnector Wizard to create fixed delimited configuration files
  • Use the Regex Tester tool to create common and sub-message parsing and token-to-event mapping
  • Create a tailored Categorization file for a parent FlexConnector and test its function in an active channel
  • Navigate the connector configuration file hierarchy to locate, display and edit.

 Audience/Job Roles

This intermediate level course is intended primarily for security administrators, content authors/architects and IT integrators, who build and install custom connectors to provide critical event data feeds to ArcSight ESM or Logger. This can include senior analysts for networks, security systems, enterprise applications and databases.

Plan szkolenia Rozwiń listę

  1.  Connector Overview 
  2.  Creating the FlexConnector Configuration File  
  3. Database and SNMP FlexConnectors 
  4. Using the ArcSight Schema 
  5. Regular Expression (RegEx) FlexConnectors 
  6.  Advanced FlexConnector Topics 
Pobierz konspekt szkolenia w formacie PDF

Dodatkowe informacje

Wymagania wstępne

To be successful in this course, you should have the following prerequisites or knowledge.

  • Successful completion of ArcSight ESM Admin and Analyst course
  • Successful completion of ArcSight ESM Advanced Administrator course
  • Working knowledge of Regular Expressions
Poziom trudności
Czas trwania 3 dni
Certyfikat

The participants will obtain certificates signed by Micro Focus (course completion).

Prowadzący

Authorized Micro Focus Trainer

Pozostałe szkolenia Micro Focus | ArcSight

Szkolenia powiązane tematycznie

Bezpieczeństwo IT

Formularz kontaktowy

Prosimy o wypełnienie poniższego formularza, jeśli chcą Państwo uzyskać więcej informacji o powyższym szkoleniu.






* pola oznaczone (*) są wymagane

Informacje o przetwarzaniu danych przez Compendium – Centrum Edukacyjne Spółka z o.o.

CENA SZKOLENIA OD 5040 PLN NETTO