1040: Managing an Express 3.0 appliance

Document created by tinacostilla on Sep 14, 2012
Version 1Show Document
  • View in full screen mode


Managing an Express 3.0 appliance

Speakers: Nathan Tisdale, HP and Samir Bennacer, HP

Changes in HP ArcSight Express 3.0 have upped the ante for security incident and event management (SIEM) system performance by introducing the HP ArcSight CORR-Engine (CORR-E). Whether you’re new to the Express appliance or are already moving up to CORR-E, the key topics we’ll cover in this session will help you administer Express 3.0. You’ll learn the basics of working with archives, and we’ll show you how the process differs from previous versions of Express. You’ll learn about new and updated commands for troubleshooting Express 3.0. And you’ll come away knowing how to deal with hardware errors and to work with support for the fastest turnaround for replacement parts.