SN68: Make Your SmartConnectors Smarter with CEF

Document created by jmerrill on Sep 28, 2009Last modified by jmerrill on Jul 8, 2014
Version 3Show Document
  • View in full screen mode
SN68
Make Your SmartConnectors Smarter with CEF
Speaker: Morgan DeRodeff, Security Analyst-ArcSight; Aaron Kramer, CISSP Senior Systems Engineer-Secerno
The ArcSight Common Event Format (CEF) allows you to easily integrate your custom applications with ArcSight using your existing SmartConnector. In this session you will learn how to construct a CEF message and send your events to ArcSight in minutes. If you can control the log formats of your applications and learn how to use CEF, you will have an efficient alternative to developing FlexConnectors.
Level: Basic

Attachments

Outcomes