HPE Security ArcSight ESM - Email Parser integration uses email notifications from ESM to drive enrichment, and response workflows.

1. Navigate to Security Operations > Integrations > Integration Configurations.
   The available security integrations appear as a series of cards.

   

2. In the HPE Security ArcSight ESM - Email Parser card, click Configure.
3. In the HPE Security ArcSight ESM - Email Parser Configuration dialog box, click the Configure Email Parser link.
4. Click the ArcSight ESM link to edit the settings in the template email parser provided. At a minimum, fill in the Email is from field.
   To create you own email parser, see Create email parsers in Security Operations.
5. Check the Active box.
6. Click Update in the Email Parser form.
   The email parser is active. You do not need to return to Integration Configurations.