Skip to content
HPE Security ArcSight ESM - Email Parser integration › Security Incident Response integrations › Security Incident Response › Enterprise security case management applications › Security Operations
Release: Australia · Updated: 2026-03-12 · Official documentation · View source

Configure HPE Security ArcSight ESM - Email Parser integration

HPE Security ArcSight ESM - Email Parser integration uses email notifications from ESM to drive enrichment, and response workflows.

Before you begin

Role required: sn_si_admin

About this task

An HPE Security ArcSight ESM - Email Parser template is provided to use for the integration. It must be configured and activated before the integration takes place. Updating the parser activates it.

Procedure

  1. Navigate to All > Security Operations > Integrations > Integration Configurations.

    The available security integrations appear as a series of cards.

  2. In the HPE Security ArcSight ESM - Email Parser card, select Configure.

  3. In the HPE Security ArcSight ESM - Email Parser Configuration dialog box, select the Configure Email Parser link.

  4. Select the ArcSight ESM link to edit the settings in the template email parser provided.

    At a minimum, fill in the Email is from field. To create you own email parser, see Create email parsers in Security Operations.

  5. Check the Active box.

  6. Select Update in the Email Parser form.

    The email parser is active. You do not need to return to Integration Configurations.