Skip to content

Arcsight Internal Agent

Key facts

  • MSG Format based filter
  • Legacy BSD Format default port 514

Sourcetypes

sourcetype notes
cef Common sourcetype

Source

source notes
ArcSight:ArcSight Internal logs

Index Configuration

key source index notes
ArcSight_ArcSight ArcSight:ArcSight main none