ArcSight Reports; No More Coffee Breaks for the Analyst!
Speaker: Thomas D. Cajohn, Security Analyst, Northrop Grumman
Many times I have heard analysts say, “I just started my ArcSight report, time to get coffee.” Well, not anymore! By understanding what the analyst is looking for, new database indexes and utilizing new features in ArcSight, the wait can be eliminated. This session is geared towards the user who is familiar with modifying ArcSight configuration files. Attend and learn how to support data retention policies, better understand ArcSight queries and hints, and see successful examples.