Self-Solve Knowledge Search

Minimize Maximize
Which Smart Connector Type
This document has not been formally reviewed for accuracy and is provided as is
Title :
Which Smart Connector Type
Document ID :
KM02181909
Product - Version:
arcsight smart connectors ;
OS :
Updated :
Fri Mar 11 20:52:59 GMT 2016
Summary :
Is there a way to distinguish which Smart Connector is being used by looking at events sent to the logger by that connector
Is there a way to distinguish which Smart Connector is being used by looking at events sent to the logger by that connector. For example can I tell looking at events sent by a Oracle DB smart connector to the logger if its a "Oracle Audit DB" or "Oracle Audit Vault DB" connector being used?
Rajeev
Solution

 
You can identify each connector in the Logger GUI by it agentType, just have to go to Analize -> Search and run a kind of this query:
agentType = "oracle_db" (Oracle Audit DB)
agentType = "oracleauditvault_db" (Oracle Audit Vault DB)


if you want to know the agentType name of your connector you have to go this path and search in the agent.properties file (current\\user\\agent\\agent.properties)

Note:
If you have 2 or more equal connector, could it be a problem do a search fo the agentType; every Connector has a unique ID, you can find in in the agent.properties like agents[0].id=uniqueID1234567890!"#$%&/


Then in the Analize -> Search run this query:
deviceCustomString2 = "<Resource ID=\\" betweenthisyouhavetocopypasteexactlyid \\"/>"