Hi Team,
We need to integrate SEP 14.0 with HP ArcSight for logging & real time monitoring purpose.
We were able to integrate earlier version of SEP 12.1 RU6 with ArcSight. But, the latest version of SEP 14.0 is showing incompatible with ArcSight.
Requesting you to kindly work with backend team of HP ArcSight, to develope dedicated ArcSight connector for SEP 14.0 to ensure proper parsing of SEP logs.
Expecting for positive response from your side.
Below is the URL for HP ArcSight SmartConnector for Symantec Endpoint Protection DB.
https://www.protect724.hpe.com/docs/DOC-14120