1029: Correlating efficiently: tips, techniques, and troubleshooting

Document created by tinacostilla on Sep 14, 2012Last modified by tliu on Jul 8, 2014
Version 2Show Document
  • View in full screen mode

1029

Correlating efficiently: tips, techniques, and troubleshooting

Speaker: Anurag Singla, HP

In this session, we’ll focus on ways to troubleshoot and write content to maximize performance and efficiency. We’ll examine several correlation-related features of HP ArcSight ESM, including rules, reports, trend reports, filters, and data monitors. We’ll also compare different approaches to help you yield the best performance with the fewest resources.

Attachments

Outcomes