SmartConnector Quick Reference v1.5
Uploaded by
seifadiazSmartConnector Quick Reference v1.5
Uploaded by
seifadiazArcSight SmartConnector Quick Reference
Important SmartConnector Files
Configuration file location (Windows) c:\ArcsightSmartConnectors\myAgent\current\user\agent
Configuration file location (Linux) /opt/arcsight/connectors/myAgent/current/user/agent
Connector Configuration agent.properties
JVM Configuration agent.wrapper.conf
* Memory settings
Configuration file location (Windows) c:\ArcsightSmartConnectors\myAgent\current\config\agent
Configuration file location (Linux) /opt/arcsight/connectors/myAgent/current/config\agent
Configuration Defaults agent.defaults.properties
* Do not Edit. Copy overrides to the agent.properties
Log file location (Windows) c:\ArcsightSmartConnectors\myAgent\current\logs
Log file location (Linux) /opt/arcsight/connectors/myAgent/current/logs
Connector logs (application messages) agent.log
Connector logs (jvm and health messages) agent.out.wrapper.log
SmartConnector Command Lines
ARCSIGHT_HOME (Windows) c:\ArcsightSmartConnectors\myAgent\current\bin
setup runagentsetup.bat
or arcsight agentsetup
ARCSIGHT_HOME (Linux) /opt/arcsight/connectors/myAgent/current/bin
./runagentsetup.sh
setup or ./arcsight agentsetup
setup (advanced mode) arcsight agentsetup and choose NO at popup
setup (console mode) arcsight agentsetup -i console
arcsight agents
start or arcsight connectors
stop CTRL-C
add as a service arcsight agentsvc -i
remove as a service arcsight agentsvc -r
arcsight agentsvc
service options (help) or arcsight agentsvc -h
cd ARCSIGHT_HOME\logs
analyze logs ..\bin\arcsight agent logfu -a
status arcsight agentup
getstatus arcsight agentcommand -c status
SSL keytoolgui arcsight agent keytoolgui
SSL cert information arcsight agent tempca -i
FlexConnector Wizard arcsight flexagentwizard
RegEx tool arcsight regex
Linux: Find all smartconnectors with locate sudo updatedb && locate agent.properties
Installation Demonstrations
Windows [Test Alerts] SmartConnector opens Test GUI
https://protect724.hp.com/thread/12331
with destination of ESM
Linux [Syslog] SmartConnector listening on UDP 514 https://protect724.hp.com/thread/12332
with destination of a CEF file
by Mark Ulmer for https://protect724.hp.com /DOC-12938 Version 1.5
ArcSight® is registered trademark of Hewlett Packard Development Company L.P. in the United States and/or other countries.
Microsoft® and Windows® are registered trademarks of Microsoft Corporation in the United States and/or other countries.
Linux® is the registered trademark of Linus Torvalds in the United States and other countries.
