User`s guide

Technical white paper
8
Sending events to HP ArcSight ESM using Connectors
The HP ArcSight Connectors can also send CEF formatted log data directly to the HP ArcSight ESM as shown in Figure 4
below. This is useful for monitoring high value assets by the HP ArcSight ESM. Connectors can be configured to send log
data to multiple locations simultaneously, for example to both the HP ArcSight Logger and HP ArcSight ESM.
Figure 4. HP ArcSight Connectors logging directly to HP ArcSight ESM
The screen shot below in Figure 5 shows a UDP Receiver and a SmartMessage Receiver created in the HP ArcSight Logger to
receive events. The UDP Receiver (UDP Receiver 1) will receive log4j events from the CloudSystem Enterprise applications
and other devices on the network (Onboard Administrator (OA), Virtual Connect (VC), ESXi, network switches, etc.). The
SmartMessage receiver (CSE-SC) will receive event log data from the HP ArcSight Connectors installed on the HP
CloudSystem Enterprise host operating systems. HP ArcSight Connectors have been also configured for TippingPoint and
vCenter resources in our reference implementation.
Figure 5. Logger Event Receivers