Tuesday, 16 February 2016

Life Cycle of Event in Arcsight ESM




Event goes through 3 phases in ESM

1. Data is collected from data sources by Smart Connectors and after parsing sent to ESM

2. ESM monitors specific events and escalates as per defined rules and generates reports for review

3. Events are stored and archived as per retention policy

1 comment: