{
    "name": "arcsight",
    "description": "HP ArcSight Enterprise Security Manager (ESM) is a threat detection, analysis, triage, and compliance management SIEM platform, This connector can be use to ingesting events from ArcSight, search and case management",
    "version": "2.2.0",
    "buildNumber": 5131,
    "tags": [],
    "publishedDate": 1650360642,
    "lastUpdated": 1750917676,
    "type": "connector",
    "label": "HP ArcSight",
    "availableVersions": [
        "2.1.1",
        "2.2.0",
        "2.3.0",
        "2.3.1",
        "3.0.0",
        "3.1.0",
        "3.1.1",
        "3.1.2",
        "3.1.3",
        "4.0.0",
        "4.1.0",
        "4.1.1"
    ],
    "scm": {
        "forks": 0,
        "watchers": 0,
        "stars": 0,
        "type": "private",
        "url": "https://gitlab-van.corp.fortinet.com/fortisoar/connectors-group/connector-arcsight"
    },
    "infoPath": "/content-hub/arcsight-2.2.0/5131",
    "publisher": "Fortinet",
    "certified": true,
    "category": "Analytics and SIEM",
    "iconLarge": "/content-hub/arcsight-2.2.0/5131/images/large.png",
    "operations": [
        {
            "description": "Updates an ArcSight Event Stage, assigns it to a user and adds a comment.",
            "title": "Annotate Event",
            "operation": "annotate_event",
            "visible": true
        },
        {
            "description": "Runs a report based on an ID or URI and default inputs on the ArcSight ESM server",
            "title": "Run Report with Default Parameters",
            "operation": "run_report_default",
            "visible": true
        },
        {
            "description": "Runs a report based on an ID and custom user inputs on the ArcSight ESM server",
            "title": "Run Report",
            "operation": "run_report_params",
            "visible": true
        },
        {
            "description": "Deletes an archived report from the ArcSight ESM server, based on the Resource ID you have specified",
            "title": "Delete Report",
            "operation": "delete_archive_report",
            "visible": true
        },
        {
            "description": "Retrieves information about an active list from ArcSight ESM, based on the Active List ID you have specified",
            "title": "Get Active List Information",
            "operation": "get_active_list_info",
            "visible": true
        },
        {
            "description": "Retrieves entries for a specified active list, based on the Active List ID you have specified",
            "title": "Get Active List Entries",
            "operation": "get_active_list_entries",
            "visible": true
        },
        {
            "description": "Adds new items to a specified on ArcSight ESM, based on the Active List ID and other input parameters you have specified",
            "title": "Update Active List",
            "operation": "update_active_list",
            "visible": true
        },
        {
            "description": "Clear entries for a specified active list, based on the Active List ID you have specified",
            "title": "Clear Active List Entries",
            "operation": "clear_active_list_entries",
            "visible": true
        },
        {
            "description": "Creates a case in ArcSight ESM, based on the input parameters you have specified",
            "title": "Create Case",
            "operation": "create_case",
            "visible": true
        },
        {
            "description": "Adds the specified events to an existing case in ArcSight ESM, based on the case ID you have specified",
            "title": "Add Events to Case",
            "operation": "add_case_event",
            "visible": true
        },
        {
            "description": "Retrieves information about a case from ArcSight ESM, based on the case ID you have specified",
            "title": "Get Case Information",
            "operation": "get_case_info",
            "visible": true
        },
        {
            "description": "Updates an existing case in ArcSight ESM, based on the input parameters you have specified",
            "title": "Update Case",
            "operation": "update_case_info",
            "visible": true
        },
        {
            "description": "Deletes the specified events from an existing case from ArcSight ESM, based on the case ID you have specified",
            "title": "Delete Case Events",
            "operation": "delete_case_event",
            "visible": true
        },
        {
            "description": "Searches ArcSight ESM records based on the query you have specified",
            "title": "Search Query",
            "operation": "run_search",
            "visible": true
        },
        {
            "description": "Retrieves information for specific event information from the ArcSight ESM server, based on the event ID and other input parameters you have specified.",
            "title": "Get Event Details",
            "operation": "get_event_info",
            "visible": true
        },
        {
            "description": "Retrieves details of all fields from ArcSight ESM",
            "title": "Get Fields",
            "operation": "get_fields",
            "visible": true
        },
        {
            "description": "Downloads a report based on an ID from ArcSight ESM and then upload that report as an attachment in the CyOPs\u2122 Attachment Module",
            "title": "Download Report",
            "operation": "upload_report",
            "visible": true
        }
    ],
    "help": "https://help.cybersponse.com/support/solutions/articles/17000094479-arcsight-v2-2-0",
    "dependentSolutionPacks": [],
    "releaseNotes": "unavailable"
}