ISE with ArcSight integration

[ibrahim_hassan]

I am searching for documents on Cisco ISE that describe how we can integrate it with HP ArcSight , I didn't find such document on Cisco.com.

Are you have any of them?

[jan.nielsen]

I have not seen any ArcSight specific documents, but as with any SIEM, you really just need to get ISE to send the relevant event categories as syslog to the SIEM, and go from there.

Menu :

Administration/System/Logging/Remote Logging Targets

to create a syslog server connection

and

Administration/System/Logging/Logging Categories

to select which event categories should be sent to that syslog server