Tuesday, July 21, 2015

SIEM Deployment - ArcSight Logger 6.0 P2 is out

Logger 6.0 P2 is now available for download from HP Software support download page. Note that it is referred to as Logger 6.02 on the download site.

Logger 6.0 P2 includes:
  • Important security updates (Honestly I could not find what those updates are in the release notes, even though  I went through the document for multiple times)
  • A fix to peer search (LOG-13574).
  • Modifications to SOAP APIs:
  • SOAP API login events in Audit logs
  • SOAP login API now uses the authentication method configured in Logger, which can be an external authentication method, such as Radius. Clients using the SOAP login API must now pass the login credentials for the authentication method configured in Logger (e.g. Radius credentials) instead of the credentials of a local Logger user.

The full release notes can be found HP Protect Website. You may also find the Loggersupport matrix useful.

Some important notes:
  • The data migration tool was updated.
  • Migration from older Logger versions should be done to Logger 6.0 P1 followed by an upgrade to Logger 6.0 P2.
To resume the migration path, it is for most systems 5.0 GA (L5139) > 5.0 Patch 2 (L5355) > 5.1 GA (L5887) > 5.2 Patch 1 (L6307) > 5.3 GA (L6684) > 5.3 SP1 (L6838) > 5.5 (L7049) > 5.5 Patch 1 (L7067) > 6.0 (L7285) > 6.0 Patch 1 (L7307) > 6.0 Patch 2 (L7334).

The Logger trial version is not updated and remains at Logger 6.0 P1.

About OS version supported there are also no changes and RHEL 6.5 and 6.2 as well as CentOS 5.5 and 6.5 are supported.

3 comments:

  1. Hi
    I have a Logger currently running on 6.0 P1.
    Looking at the migration path, it will be a direct upgrade.
    Has anyone try the upgrade?
    Any problem faced?

    ReplyDelete
  2. What is the full version string for this?

    ReplyDelete
  3. What is the full version for this patch?

    ReplyDelete