Use this command to create the subscription required to send Change Auditor event data to ArcSight.
$allSubsystems = Get-CAEventExportSubsystems -Connection $connection
Use this command to see the details of the current ArcSight subscriptions.
Get-CAArcSightEventSubscriptions -Connection $connection
The command returns the following information.
Use this command to modify an ArcSight subscription.
Example: Disable a subscription
Example: Edit the subsystems included in a webhook subscription
Set-CAArcSightEventSubscription -Connection $connection -SubscriptionId cd87b774-8e65-46e1-8520-da478c60c4c3 -Subsystems $newSubsystems
Use this command to remove a subscription.
The ID of the subscription to remove. This parameter is required if the Subscription parameter is not specified. Use the Get-CAArcSightEventSubscriptions command to find the ID. |
Remove-CAArcSightEventSubscription -Connection $connection -SubscriptionId $subscriptionId
© ALL RIGHTS RESERVED. Términos de uso Privacidad Cookie Preference Center