7.7 updates the Filebeat CEF module to be able to ingest CEF-formatted data from Check Point network devices.
The Elastic Stack is certified by ArcSight to support CEF-formatted data, whether generated by ArcSight or external sources. Stream events via ArcSight Smart Connectors or hook into the ArcSight Data Platform (ADP). Parsing and enrichment by Logstash simplify the indexing of data into Elasticsearch. Pre-built dashboards can be tailored to meet your specific needs.
Which of my devices or endpoints are busiest and what services are they rendering?