Generator ID Manager

Every event generated by an ArcSight component will have a unique Global Event ID. This will help in identifying the events in case the same event is seen in multiple ArcSight components like Logger, ESM, and Transformation Hub.

 

Generator ID Management

This feature allows users to generate an ID to assign it to a non-managed product. Each assigned Generator ID should be unique for the ArcSight environment.

Setting Up Generator ID Management

  1. On the top right side of the screen, click Generator ID Manager.
  2. Select Yes to enable Generator ID Management in ArcMC.
  3. Enter the numeric values between 1 and 16383 for the Generator ID range (Start and End) and click Save. ArcMC will set the generator ids for itself if not set already.
  4. Restart all ArcMC processes to continue.

Getting Generator ID for Non-managed Nodes

  1. Go to Configuration Management and select Generator ID Management.
  2. Click Assign a Generator ID.
  3. Select the Event Producer Type. Other fields are optional, click Assign.
  4. Copy the ID by clicking the copy to clipboard icon and Click OK. A list of generated IDs will be displayed.

Setting Generator IDs on Managed Nodes

ArcMC will automatically set the generator IDs for each managed node when performing the following actions, if ArcMC is enabled as a Generator ID Manager:

Connectors

Note: Multiple host deployment is disabled when the Generator ID Manager flag is enabled.

Logger

ArcMC

Transformation Hub