View your CEF data in new dashboards added to the Filebeat CEF module in version 7.6.
The Elastic Stack is certified by ArcSight to support CEF-formatted data, whether generated by ArcSight or external sources. Stream events via ArcSight Smart Connectors or hook into the ArcSight Data Platform (ADP). Parsing and enrichment by Logstash simplify the indexing of data into Elasticsearch. Pre-built dashboards can be tailored to meet your specific needs.
Which of my devices or endpoints are busiest and what services are they rendering?
Grab a fresh installation of the Elastic Stack and start exploring your ArcSight security events in a few easy-to-follow steps.