CSN2: ArcSight Reports; No More Coffee Breaks for the Analyst!

Document created by jmerrill on Sep 28, 2009Last modified by jmerrill on Jul 8, 2014
Version 2Show Document
  • View in full screen mode

CSN2
ArcSight Reports; No More Coffee Breaks for the Analyst!
Speaker: Thomas D. Cajohn, Security Analyst, Northrop Grumman
Many times I have heard analysts say, “I just started my ArcSight report, time to get coffee.” Well, not anymore!  By understanding what the analyst is looking for, new database indexes and utilizing new features in ArcSight, the wait can be eliminated. This session is geared towards the user who is familiar with modifying ArcSight configuration files. Attend and learn how to support data retention policies, better understand ArcSight queries and hints, and see successful examples.
Level: Intermediate

Attachments

Outcomes