Elastic Delivers ArcSight Integration for Flexible, Scalable, and Real-Time Security Analytics Capabilities

MOUNTAIN VIEW, Calif. and AMSTERDAM, The Netherlands, Sept. 12, 2017 -- Elastic, the company behind Elasticsearch, and the Elastic Stack, the most widely used collection of open source products for solving mission-critical use cases like search, logging, and analytics, today announced a new partnership with Micro Focus and product integration between the Elastic Stack and ArcSight. Unveiled today during the keynote at Protect 2017, this new partnership combines Elastic’s open source search, logging and analytics products with the ArcSight Data Platform (ADP), a best-in-class open platform for collecting, enriching and normalizing security data, to provide real-time capabilities and ad hoc security data exploration at scale.

Available immediately, the Elastic Stack ArcSight Integration gives security teams real-time visibility into ArcSight security events and provides the necessary tools to augment security operations with an open source capability to “build-your-own” security insights. The integration provides a turnkey experience for processing data in Logstash, ingesting data into Elasticsearch, visualizing data in packaged Kibana dashboards, and the ability to install Elastic’s X-Pack features, such as security, alerting, monitoring, reporting, Graph analytics, and machine learning.

“Today’s security teams have adopted the Elastic Stack because of its interactive investigation capabilities, horizontal scale, and flexibility to handle highly complex and variant data types,” said Shay Banon, Elastic Founder and CEO. “We are thrilled to partner with Micro Focus to enable this ArcSight integration in a way that is simple for users to get started, adds immediate value to their deployments, and further, validates the importance of real-time search to help solve their critical business issues.”

“Security data underpins the modern security operations environment and organizations require an open architecture that can consolidate and normalize data,” said Travis Grandpre, Director of Security marketing, Micro Focus. “The Elastic Stack integration with ArcSight Data Platform’s open architecture, gives organizations interactive investigation capabilities for real-time cyber-threat detection as part of a sophisticated security information and event management (SIEM).”

With a single command, users can install the Logstash ArcSight module for free, which controls the integration between the Elastic Stack and the ArcSight Data Platform (ADP). By using ArcSight’s Event Broker and Smart Connectors, security events can be received, enriched, indexed, and analyzed in real time in Elasticsearch at scale. Then, using Kibana visualizations, security operators and analysts can gain immediate insights, such as understanding top devices, endpoints, attackers, and targets alongside the ability to instantly drill down on any and all aspects of the data to get a holistic view of the security environment.

Learn More

• Elastic Stack ArcSight Integration
• Elastic and ArcSight Blog

About Elastic
Elastic builds software to make data usable in real time and at scale for search, logging, security, and analytics use cases. Founded in 2012, the company develops the open source Elastic Stack (Elasticsearch, Kibana, Beats, and Logstash), X-Pack (commercial features), and Elastic Cloud (a hosted offering). To date, there have been more than 140 million cumulative downloads. Backed by Benchmark Capital, Index Ventures, and NEA with more than $100 million in funding, Elastic has a distributed workforce with more than 600 employees in 30 countries. Learn more at elastic.co. 

Elastic Media Contacts:

AMER
Michael Lindenberger
Reidy Communications for Elastic
[email protected]
+1-415-531-1449

EMEA
Rory MacDonald
Age of Peers Ltd for Elastic
[email protected]
+44 (0)7899 965232

APAC
Jeff Yoshimura
Communications @ Elastic
[email protected]
+650-458-2620