Elastic Delivers ArcSight Integration for Flexible, Scalable, and Real-Time Security Analytics Capabilities

Available immediately, the Elastic Stack ArcSight Integration gives security teams real-time visibility into ArcSight security events and provides the necessary tools to augment security operations with an open source capability to "build-your-own" security insights. The integration provides a turnkey experience for processing data in Logstash, ingesting data into Elasticsearch, visualizing data in packaged Kibana dashboards, and the ability to install Elastic's X-Pack features, such as security, alerting, monitoring, reporting, Graph analytics, and machine learning.

"Today's security teams have adopted the Elastic Stack because of its interactive investigation capabilities, horizontal scale, and flexibility to handle highly complex and variant data types," said Shay Banon, Elastic Founder and CEO. "We are thrilled to partner with Micro Focus to enable this ArcSight integration in a way that is simple for users to get started, adds immediate value to their deployments, and further, validates the importance of real-time search to help solve their critical business issues."

"Security data underpins the modern security operations environment and organizations require an open architecture that can consolidate and normalize data," said Travis Grandpre, Director of Security marketing, Micro Focus. "The Elastic Stack integration with ArcSight Data Platform's open architecture, gives organizations interactive investigation capabilities for real-time cyber-threat detection as part of a sophisticated security information and event management (SIEM)."

With a single command, users can install the Logstash ArcSight module for free, which controls the integration between the Elastic Stack and the ArcSight Data Platform (ADP). By using ArcSight's Event Broker and Smart Connectors, security events can be received, enriched, indexed, and analyzed in real-time in Elasticsearch at scale. Then, using Kibana visualizations, security operators and analysts can gain immediate insights, such as understanding top devices, endpoints, attackers, and targets alongside the ability to instantly drill down on any and all aspects of the data to get a holistic view of the security environment.

Learn More

• Elastic Stack ArcSight Integration
• Elastic and ArcSight Blog