A popularly requested video is one that digs into how to create a FlexConnector (a custom log source integration into ArcSight) from scratch. This is what this video series is to cover - stick with it, there are multiple parts!
In this third video, I am digging into the regex processing of my test log file. Stick with this, its going to get technical and I will be covering a lot though. This is a slightly longer video at 16 mins, so stop and pause on anything that you are not sure about.
For more Regex info, see here - https://regexone.com/
Recommend checking out the Micro Focus community for ArcSight here, if you havent:
https://community.softwaregrp.com/t5/ArcSight/ct-p/arcsight
(and you can access the documentation without an account - if you didnt know - time to read up!)
