search cancel

Upgrade a SIEM agent

book

Article ID: 173988

calendar_today

Updated On:

Products

CASB Security Standard CASB Security Premium CASB Security Advanced CASB Audit CASB Gateway CASB Gateway Advanced

Issue/Introduction

CloudSOC (CASB)

SIEM agent (ArcSight, Splunk, or QRadar) is out of date.

Resolution

  1. Download the latest version of your SIEM agent. Follow the steps on page 2 of the Delivering CloudSOC Logs with the SIEM Agent tech note. 
  2. Extract the files to the same directory your agent is currently installed in. Follow the steps on page 5 of the same tech note. 
    • Replace all duplicate files with the new ones
  3. Run install.sh

Additional Information

Here is the link to the Tech Doc for more details