TT25: Exploiting Variables to Build Powerful ArcSight ESM Content

Document created by beleslie on Aug 29, 2011Last modified by beleslie on Jul 8, 2014
Version 2Show Document
  • View in full screen mode

TT25
Exploiting Variables to Build Powerful ArcSight ESM Content
Speaker:
Rob Block, Principal Software Engineer, HP ArcSight
This talk will explain how using variables can extend and customize ArcSight ESM functionality and build powerful content to solve specific use cases. We will cover the built-in ArcSight ESM variable functions, chaining, run-time performance considerations, and examples of using Velocity to perform sophisticated text processing.

Attachments

Outcomes