Transformation Hub
For information about Configuring a SmartConnector as a Transformation Hub Producer, refer to Administrator's Guide to ArcSight Platform available on the ArcSight Documentation site.
|
Parameters |
What to specify or select |
||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
|
Kafka Broker Host(s):Port(s) |
This is a mandatory field. You must specify at least one server. If there are multiple servers, then specify a comma-separated list of hostnames and ports to establish a communication with the Transformation Hub cluster. While it is not necessary to list all servers in the cluster, listed, if none of the servers listed can be contacted, the Connector cannot send events to Transformation Hub. |
||||||||||||
| Kafka Broker on SSL/TLS |
Determines whether events are sent with TLS encryption. Select one of the following options:
If you select true , you must provide the SSL/TLS Truststore Password and the location of the SSL/TLS Truststore File Path. When Kafka Broker on SSL/TLS is set to true, a secure connection will be established with the Kafka broker(s) specified in the Kafka Broker Host(s):Port(s) field. Note: If you want to set the Kafka Broker on SSL/TLS parameter to true, refer to the ArcSight Platform admin guide for instructions on performing the certificate trust exchange between the SmartConnector and Transformation Hub for the secure connection to work properly.
|
||||||||||||
| TH User Name |
Specify the user name and password of the TH server to connect to the server over SSH or SCP. Connector connects to the TH server to fetch the server certificate and import into the truststore of the Connector, copies the Certificate Signing Request (CSR) to the server and gets the CSR signed. |
||||||||||||
| TH Password | |||||||||||||
|
Receive Acknowledgment |
This is a mandatory field. Select a value to determine if and how the Connector waits for acknowledgment from Transformation Hub that it has received the event.
|
||||||||||||
|
Select any of the following topics for the corresponding content format:
Note: The default Content Format is CEF (for IPv4 and IPv6) and Kafka Topic is |
||||||||||||
| Compression Type |
Compression reduces disk space and network bandwidth requirements. Select the compression algorithm used (gzip, zstd, none) when Transformation Hub copies events, such as when routing events between Topics.
|
||||||||||||
| ESM Version for ESM Topic |
Select the ESM version number of the desired ESM topic. If you do not select any value, the latest version of ESM is considered. This field is mandatory when the Content Format is selected as ESM Binary. |
||||||||||||
| Schema Registry Host:Port |
Specify the host:port of the Schema Registry node to fetch schema using HTTPS. Use the FQDN or the IP address for the Virtual IP of the master node of the Transformation Hub to achieve high availability. In this case, if the primary node fails, the Virtual IP will automatically migrate to a failover master node and the connector will still be able to access the schema registry without having to reconfigure the connector. If Transformation Hub is configured with only a single master node, use the FQDN or IP address of that master node. Use 32081 as the port unless it is customized in your environment. Note: For an AWS environment, use the cluster
DNS hostname:32081.This field is mandatory when the Content Format is selected as Avro. |
||||||||||||
| SSL/TLS Truststore File Path |
Specify the location of the SSL/TLS truststore file. This is required to access HTTPS Schema Registry for Avro or the TLS-based secure communication for the Kafka brokers. This field is mandatory when the Content Format is selected as Avro or when Kafka Broker on SSL/TLS is set to true. |
||||||||||||
| SSL/TLS Truststore Password |
Specify the password for the SSL/TLS truststore file. This field is mandatory when the SSL/TLS Truststore File Path is specified. |
||||||||||||
| Use SSL/TLS Client Authentication |
Determines whether a client certificate is used for TLS to identify the Connector. Select one of the following options:
If you select true, ensure that the Kafka Broker on SSL/TLS is enabled. You must also provide values for the SSL/TLS Keystore File Path, SSL/TLS Keystore Password, and SSL/TLS Key Password parameters. Note: If you want to set the Use SSL/TLS Client Authentication parameter to true, refer to the Administrator's Guide to ArcSight Platform for instructions on performing the certificate trust exchange between the SmartConnector and Transformation Hub for the secure connection to work properly.
|
||||||||||||
| SSL/TLS Keystore File Path | Specify the location of the SSL/TLS keystore file path for client authentication. | ||||||||||||
| Organizational Unit (OU) | Specify the name of your organizational unit. | ||||||||||||
| Organization (O) | Specify the name of your organization. | ||||||||||||
| Location (L) | Specify the name of your city or locality. | ||||||||||||
| State (ST) | Specify the name of your state or province. | ||||||||||||
| Country (C) | Specify the two-letter country code for this unit. |