SN119: Primer: Using Variables

Document created by beleslie on Aug 25, 2011Last modified by beleslie on Jul 8, 2014
Version 3Show Document
  • View in full screen mode

Primer: Using Variables
Javier Inclan, Education Delivery Manager, HP ArcSight
This primer session demonstrates how to create effective variables, which can add flexibility to ArcSight ESM resources. Learn what to consider when adding variables into ArcSight ESM resources. Also learn how to make your resources flexible by using virtual event fields, whose values are derived from a special function performed on another field.