This section describes how to install ArcSight SmartConnector on Windows.
To install ArcSight SmartConnector:
This application is a component of HP ArcSight and is not included in Kaspersky CyberTrace.
SmartConnector installation: Introduction
%ARCSIGHT_HOME%
).
Choosing an installation folder
You can also choose not to create icons.
Choosing a shortcut folder
Adding a connector
If this window is not displayed, configure ArcSight SmartConnector manually. For this purpose, run the following command:
%ARCSIGHT_HOME%\current\bin\runagentsetup.bat
Selecting the connector type
Click Next.
It is the same port that is specified on the Settings > Service tab of Kaspersky CyberTrace Web (by default, it is 9998
).
It is the same IP address that is specified on the Settings > Service tab of Kaspersky CyberTrace Web (by default, it is 127.0.0.1
).
You can specify ALL
if you want Arcsight SmartConnector to receive events from all network interfaces of the computer on which it runs. (Note that you cannot specify ALL
in the Feed Service configuration file.)
Raw TCP
.false
.Parameters for sending detection events
Click Next.
Click Next.
By default, it is 8443.
false
.false
.false
.Destination parameters
Click Next.
Connector details
Click Next.
Choosing installation mode
Click Next.
We recommend that you set the service name to be the same as the connector name.
Specifying service parameters
Click Next.
The operation summary is displayed.
SmartConnector installation: Operation summary
%ARCSIGHT_HOME%/current/user/agent/agent.properties
configuration file, specify 30000
in the agents[0].tcppeerclosedchecktimeout
parameter.ArcSight %ServiceDisplayName%
is running (%ServiceDisplayName%
is the name that you specified in the Service Display Name box in the previous step).For this purpose, open Windows Task Manager and check the status of the service. The status must be Running
. Using Windows Task Manager, you can stop or start the service.