Managing an Express 3.0 appliance
Speakers: Nathan Tisdale, HP and Samir Bennacer, HP
Changes in HP ArcSight Express 3.0 have upped the ante for security incident and event management (SIEM) system performance by introducing the HP ArcSight CORR-Engine (CORR-E). Whether you’re new to the Express appliance or are already moving up to CORR-E, the key topics we’ll cover in this session will help you administer Express 3.0. You’ll learn the basics of working with archives, and we’ll show you how the process differs from previous versions of Express. You’ll learn about new and updated commands for troubleshooting Express 3.0. And you’ll come away knowing how to deal with hardware errors and to work with support for the fastest turnaround for replacement parts.