As of today, is there any connector that we can integrate with Arcsight SIEM?
Or is it still need to utilize the ISC APIs ? If yes, anyone done it before? Is it we just need to provide the relevant APIs to Arcsight team and let them configure to call the APIs and collecting the log data?
Based on current forum discussions, there is no pre-built connector for ArcSight SIEM integration with ISC. You’ll need to use ISC APIs to collect log data. The typical approach is providing the relevant API endpoints to your ArcSight team for custom configuration.
A similar question about QRadar SIEM integration faced the same pattern—API-based integration is the standard method. .