Speaker: Brook Watson, Solutions Architect, ArcSight
This session will focus on ArcSight implementation architectures. It will be geared towards administrators and authors in charge of maintaining the health and content of each of the ArcSight components. Several architectures will be discussed, including multiple tiered ArcSight ESM instances, multiple ArcSight Logger instances with a single ArcSight ESM instance, and the traditional single ArcSight Logger with a single ArcSight ESM instance. The pros and cons surrounding each architecture and best practices will be discussed.