SN17: ArcSight Architectures

Document created by jmerrill on Sep 10, 2010
Version 1Show Document
  • View in full screen mode

ArcSight Architectures
Brook Watson, Solutions Architect, ArcSight
Level: Intermediate
This session will focus on ArcSight implementation architectures. It will be geared towards administrators and authors in charge of maintaining the health and content of each of the ArcSight components. Several architectures will be discussed, including multiple tiered ArcSight ESM instances, multiple ArcSight Logger instances with a single ArcSight ESM instance, and the traditional single ArcSight Logger with a single ArcSight ESM instance. The pros and cons surrounding each architecture and best practices will be discussed.