Data collection

Connectors are specifically developed to work with network and security products by using multiple techniques such as simple log forwarding and parsing, direct installation on native devices, SNMP, and syslog.

The connectors support the following data collection and event reporting formats:

• Log File Readers (including text and log file)
• Syslog
• SNMP
• Database
• XML
• Proprietary protocols, such as OPSEC

The ArcSight ESM Console, ESM Manager, and connectors communicate using HTTP over Secure Sockets Layer (SSL also referred to as HTTPS).

Different connectors are available for the following types of vendor devices:

• Network and host-based IDS and IPS
• VPN, Firewall, router, and switch devices
• Vulnerability management and reporting systems
• Access and identity management
• Operating systems, Web servers, content delivery, log consolidators, and aggregators

For more information about the types of SmartConnectors, see Types of SmartConnectors.