This ArcSight Management Center - Administration & Operations training course provides hands-on techniques needed to centralize device management, user management, and configuration management with ArcMC. Learn integration strategies to reduce daily management of ArcMC, Logger, Event Broker and Connectors products.
By attending ArcSight Management Center - Administration & Operations workshop, delegates will learn to:
- Describe the components of an ArcMC environment, how they interoperate, and requirements for centralized management of ArcSight Products.
- Develop user roles for Loggers and ArcMC: Grant entitlements to these roles and deploy to managed devices
- Monitor system health status of all ArcMC managed nodes and devices through breach rules and status monitoring
- Use of initial configurations for rapid Logger deployment
- Use of subscriber configuration policies to confirm compliance to baselines
- Set up the Event Broker as a managed node on ArcMC; configure Connectors as EB Producers and Loggers as EB Consumers, plus create topics and Routes for EB
- Describe and Configure the Global Event ID and Generator ID in all components
- Six months experience administering ArcSight products (Connectors, Connector Appliances, Loggers)
- Knowledge of:
- ArcSight SmartConnector, Connector Appliance, Event Broker, ESM and/or Logger operational and administrative concepts
- TCP/IP networking, file system and database concepts
- Configuration management, User Management and concepts
- Enterprise security, event and log management experience is highly advantageous
- Upgrade Logger and Connectors though ArcMC interface
- Forward Configuration of ArcMC Audit events