ASFC160 – ArcSight FlexConnector Configuration

ArcSight FlexConnector Configuration provides you with an overview of the ArcSight SmartConnectors framework and explains the ArcSight ESM Schema. It teaches you how to construct and manipulate FlexConnector configuration and property files and use various parsing methods including fixed delimited, regular expressions, syslog, and JSON. Examples from standard connectors are used to illustrate device- specific methodologies. Advanced configuration options such as multi-line Regex, parser linking and conditional mapping are also covered