Speaker: Brook Watson, Solutions Architect-ArcSight
This session will focus on the possible ArcSight architectures, including the use of ArcSight ESM, ArcSight Logger and ArcSight Connector Appliance. It will be geared towards ArcSight administrators and authors in charge of maintaining the health and content of each of the ArcSight components. Several potential architectures will be discussed, including: multiple tiered ESM instances, multiple Loggers with a single ESM instance and the traditional single Logger with a single ESM instance. The pros and cons surrounding each architecture and best practices will be discussed.