cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
1652
Views
0
Helpful
1
Replies

ISE with ArcSight integration

ibrahim_hassan
Level 1
Level 1

I am searching for documents on Cisco ISE that describe how we can integrate it with HP ArcSight , I didn't find such document on Cisco.com.

Are you have any of them?

1 Reply 1

jan.nielsen
Level 7
Level 7

I have not seen any ArcSight specific documents, but as with any SIEM, you really just need to get ISE to send the relevant event categories as syslog to the SIEM, and go from there.

 

Menu :

Administration/System/Logging/Remote Logging Targets

to create a syslog server connection

and

Administration/System/Logging/Logging Categories

to select which event categories should be sent to that syslog server