This ArcSight Logger - Search and Reporting training course covers how to search and report with ArcSight Logger. This course begins with a quick overview of Logger and moves into searching for events, using search tools, working with filters and saved searches as well as designing and generating reports. The course wraps with report dashboards.
By attending ArcSight Logger - Search and Reporting workshop, delegates will learn to:
- Explain how Logger processes event data
- Enable peer Loggers for searching
- Use the Search Builder tool as the common UI to create any queries, in any combination with pipeline operators
- Save a query as a filter or a saved search, and retrieve it later
- Run a report as a scheduled report job
- Copy and save a customized report template to meet your needs
- Create and edit a report query
- Design a new report dashboard
- Basic Logger knowledge or experience
- Possible attack activities, such as scans, man in the middle, sniffing, DoS, and possible abnormal activities, such as worms, Trojans, and viruses
- SIEM terminology, such as threat, vulnerability, risk, asset, exposure, and safeguards
The ArcSight Logger - Search and Reporting class is ideal for:
- System analysts who need to search and report using ArcSight Logger.