---
title: ArcSight ESM Integration Settings for event ingestion integration
description: Use this option to modify the ArcSight ESM default ingestion settings.
locale: en-US
canonical_url: https://www.servicenow.com/docs/r/australia/security-management/security-incident-response/arcsight-esm-settings.html
release: australia
product: Security Incident Response
classification: security-incident-response
topic_type: concept
last_updated: "2026-03-12"
reading_time_minutes: 1
breadcrumb: [ArcSight ESM Event Ingestion integration, Security Incident Response integrations, Security Incident Response, Enterprise security case management applications, Security Operations]
---

# ArcSight ESM Integration Settings for event ingestion integration

Use this option to modify the ArcSight ESM default ingestion settings.

To modify the system properties, log in as a user with the `sn_si.admin` role and navigate to **ArcSight ESM Integration** > **ArcSight ESM Integration Settings**.

The default configuration settings are displayed. You can modify these settings if required.

\[Omitted image "sir-arcsight-esm-intg-settings.png"\] Alt text: ArcSight ESM: Integration Settings