Primer: Using Variables
Speaker: Javier Inclan, Education Delivery Manager, HP ArcSight
This primer session demonstrates how to create effective variables, which can add flexibility to ArcSight ESM resources. Learn what to consider when adding variables into ArcSight ESM resources. Also learn how to make your resources flexible by using virtual event fields, whose values are derived from a special function performed on another field.