ArcSight FlexConnector Multiple Database

Choose this type to retrieve information from multiple databases that use the same query or retrieve different set of events using different queries from the same database.

Note:

  • For Microsoft SQL Server as the database, after installing connector core software and before configuring the ArcSight FlexConnector Multiple DB, you will need to download an appropriate JDBC driver for the connector to connect to the database.  For more information, see Downloading the Database Driver.

  • Knowledge of SQL is a prerequisite for coding database FlexConnectors.

  • SmartConnector releases since 7.2.1 have implemented Java 8, which does not support ODBC connections; therefore, database connectors can only use JDBC connections. For the same reason, the MS Access database, which uses only ODBC connections, is no longer supported.

Parameter

Description

JDBC/ODBC Driver

The JDBC driver that will be used to connect to the database.

  • For SQL Server, use:
    com.microsoft.sqlserver.jdbc.SQLServerDriver.

  • For MySQL, use:
    org.gjt.mm.mysql.Driver.

  • For Oracle, use: oracle.jdbc.driver.OracleDriver

    This default Oracle JDBC driver works with Oracle 9i, 10g, 11g, and 12c database versions.

  • For PostGreSQL, use: org.postgresql.Driver

  • For DB2 unified driver, use: com.ibm.db2.jcc.DB2Driver

  • For DB2 Legacy CLI-based, use: COM.ibm.db2.jdbc.net.DB2Driver

  • For Sybase, use: net.sourceforge.jtds.jdbc.Driver

URL

The JDBC URL that identifies the database.

  • For Oracle, use: jdbc:oracle:thin:@hostname_or_IP:1521:database_name

  • For MySQL, use: jdbc:mysql://hostname_or_IP:3306/database_name

  • For Microsoft SQL Server 2000, use:
    jdbc:microsoft:sqlserver://host:port;databasename=name

  • For Microsoft SQL Server 2005 and later, use: jdbc:sqlserver://host:port;databasename=name

  • For PostGreSQL, use: jdbc:postgresql://host/database

  • For DB2 unified driver, use: jdbc:db2:database_name

  • For DB2 Legacy CLI-based, use: jdbc:db2://host_name: port_number/ database_name

  • For Sybase, use: jdbc:jtds:sybase://<HostName>:<port>/<DatabaseName>

User

The database user name.

Password

Password for the database user.

Frequency

Specifies how often, in seconds, to query the database.  The default is 5 seconds.

Config Folder

Enter the name of the folder that contains the properties file. Do not enter the full path to the file as doing so will result in an error.

This is also the root name of the configuration file. If the configuration folder is myfolder, then the FlexConnector will look for the configuration file in the directory:

ARCSIGHT_HOME\user\agent\flexagent\myfolder

  • The configuration file for time-based connectors will be named:

    myfolder.sdktbdatabase.properties

  • The configuration file for ID-based connectors will be named:

    myfolder.sdkibdatabase.properties