SN120: Primer: Writing Rules Not Meant to be Broken

Document created by beleslie on Aug 25, 2011Last modified by beleslie on Jul 8, 2014
Version 3Show Document
  • View in full screen mode

SN120
Primer: Writing Rules Not Meant to be Broken
Speaker:
Javier Inclan, Education Delivery Manager, HP ArcSight
Rules can help you determine what to investigate. This primer session demonstrates how to construct rules. It will focus on what to consider when building rules, and how to use rules to identify events that require further investigation.

 

Attachments

Outcomes