Skip to content

Commit 563c6a2

Browse files
committed
amit's comments
1 parent 4b408dc commit 563c6a2

File tree

1 file changed

+5
-7
lines changed
  • articles/defender-for-iot/organizations/integrations

1 file changed

+5
-7
lines changed

articles/defender-for-iot/organizations/integrations/arcsight.md

Lines changed: 5 additions & 7 deletions
Original file line numberDiff line numberDiff line change
@@ -13,23 +13,23 @@ This article describes how to send Microsoft Defender for IoT alerts to ArcSight
1313

1414
Before you begin, make sure that you have the following prerequisites:
1515

16-
- Access to a Defender for IoT OT sensor, version TBD or higher. Make sure that you can sign in as a TBD user.
17-
18-
- Access to an ArcSight server as a TBD user.
16+
- Access to a Defender for IoT OT sensor as an Admin user.
1917

2018
## Configure the ArcSight receiver type
2119

22-
This procedure describes how to TBD.
20+
To configure your ArcSight server settings so that it can receive Defender for IoT alert information:
2321

2422
1. Sign in to your ArcSight server.
2523
1. Configure your receiver type as a **CEF UDP Receiver**.
2624

27-
For more information, see TBD.
25+
For more information, see the [ArcSight SmartConnectors Documentation](https://www.microfocus.com/documentation/arcsight/arcsight-smartconnectors/#gsc.tab=0).
2826

2927
## Create a Defender for IoT forwarding rule
3028

3129
This procedure describes how to create a forwarding rule from your OT sensor to send Defender for IoT alerts from that sensor to ArcSight.
3230

31+
For more information, see [Forward alert information](../how-to-forward-alert-information-to-partners.md).
32+
3333
1. Sign in to your OT sensor console and select **Forwarding** on the left.
3434

3535
1. Enter a meaningful name for your rule, and then define your rule details, including:
@@ -38,8 +38,6 @@ This procedure describes how to create a forwarding rule from your OT sensor to
3838
- The protocols you want to include in the rule.
3939
- The traffic you want to include in the rule.
4040

41-
For more information, see [Forward alert information](../how-to-forward-alert-information-to-partners.md).
42-
4341
1. In the **Actions** area, define the following values:
4442

4543
- **Server**: Select **ArcSight**

0 commit comments

Comments
 (0)