SN02: Tips and Tricks for ArcSight ESM

Document created by beleslie on Aug 25, 2011Last modified by beleslie on Jul 8, 2014
Version 3Show Document
  • View in full screen mode

SN02
Tips and Tricks for ArcSight ESM
Speaker:
Raju Gottumukkala, ArcSight Expert, HP ArcSight
In this session you will learn super user tricks that address several scenarios, including: displaying the same field in a correlation event from multiple base events; using negative events; checking and populating a field in an active list from another field in a different active list; manipulating date type field in an active list; and understanding the quirks in every threshold and time unit triggers.

 

Attachments

Outcomes