Arcsight Logger 3.0 Training: Workshop Course Outline

ArcSight Logger 3.
0 Training
Workshop Course Outline
Module 1 Introduction to ArcSight Logger 3.0
o Basic features and functionality

o Logger models, speeds and feeds
o Deployment scenarios, use cases
o Basic architecture and data flow
o Hardware and software specifications
Module 2 Initializing Logger
o Using a Web browser

o Using the CLI
o Logging in to Logger
o Setting up initial network connections (NICs)
Module 3 Deployment Planning
o Setting storage volumes

o Setting retention policy
o Setting storage groups
o Rebooting
o Initial configuration procedure
Receivers
Devices
Device groups
Storage rules
Indexed fields
Module 4 Navigating Logger
o Logger gauges, menu bar, help/options

o Navigation and window controls
o Introduction/overview of main Logger tabs
Structure of subtabs, menus, etc.
Module 5 Configuring Global Settings
o Overview of major functions of System Admin tab

Settings
Global settings
login settings
password
Authentication
Logger Training Workshop 1

Logger V3.0 Course Outline V1.0
ArcSight Confidential
ArcSight Logger 3.0 Training
Module 6 Configuring Platform Settings
o Platform settings
Configuring DNS
Configuring hosts
Configuring network settings
Configuring time/NTP settings
Configuring SMTP setting
Configuring static route settings
Module 7 Configuring Other System Admin Settings
o SSL settings
o RFS settings
o System information
o Overview of System reboot, system update
Module 8 Configuring Logger Input and Output
o Logger Input and Output; receivers and forwarders

Receivers - CEF vs raw data capabilities
Forwarders and ESM Destinations
Devices and Device Groups
Peer Loggers and network searches
Module 9 Managing Users and Groups
o Users and Groups access privileges

Managing user groups
Managing Users
Managing Passwords
Module 10 Searching for Events
o Field-based and RegEx searches

Search page UI
Running a field-based search
Indexing
Module 11 Regular Expression and Field-based Queries
o About Queries; comparing query, search, and filters

Understanding Regular Expressions
Writing Saving and Using Queries
Working with Query Results
Using the Histogram

Module 12 Using Filters and Saved Searches
o About Filters
Search Group Filters
Saved Searches
Scheduled Searches
Module 13 Logger Reporting Functions
o About Reports
Report Groups
Viewing Reports from the Reports tab or Reports Dashboard
Running and Editing Reports
Publishing and Exporting Report Results
Scheduling Reports
Filtering Reports
Report Server Administration
Moving reports using backup and restore
Module 14 Modifying Existing Reports
o Editing and Saving Reports

Modifying a pre-built query in SQL Editor
Filtering a result set, adding a WHERE clause to a query
Changing fields retrieved
Limiting returned results and organizing using SORT by/GROUP by
Assigning a user-friendly label to fields using Query Object List screen
Customizing width and alignment
Hyperlinking to another report
Module 15 Creating New Reports
o Report templates, report designer

o Using report category filters
o Setting report preferences
o Specifying fields, sort order, highlighting, etc.
o Creating a matrix
o Creating a chart
o Using parameters
Module 16 Using the Dashboard
o Understanding the Dashboard

o Creating a New Dashboard
Creating Widgets
Adding a Report to a Widget
Adding a Use Case to a Wid get
Adding an External Link to a Widget
Linking Widgets, setting preferences, working with views
o Editing and Deleting Dashboards

17 Logger Alerts and Notifications
o Alerts (for internal Logger system events requiring attention)

Create, edit, view, enable/disable, or delete an alert
o Notifications (for security events passing through Logger)
Create, edit, view, enable/disable, or delete a notification
Module 18 Import, Export, Backup, and Restore

o Import and Export Logger alerts and queries
o Backup and Restore Logger reports
o Configuration change tracking
o Configuration backup and restore
o Event archives
Module 19 Configuring SmartConnectors
o About SmartConnectors
Different types of connectors
Connector forwarding options
Sending events from Logger to ESM
Sending events from ESM to Logger
o Overview of configuring SmartConnectors for failover destinations
Module 20 Logger L3000 with Connector Appliance
o Connector Appliance concepts and functionality

Managing local and remote SmartConnectors
Managing and updating connector parameters
Retrieving connector logs, audit logs, and error logs
Applying Certificates
Using Certificate Authority repository
Upgrading connectors
Upgrade repositories
Updating connector parameters
Cloning connector configurations
Bulk Operations
Module 21 Using Logger in SAN Configurations
o Overview of Logger with SAN

Configuring HBA
Working with LUNs
Attach, detach, reattach, or restoring a LUN


Arcsight Logger 3.0 Training: Workshop Course Outline

Încărcat de

Informații document

Descriere originală:

Titlu original

Drepturi de autor

Formate disponibile

Partajați acest document

Partajați sau inserați document

Opțiuni de partajare

Vi se pare util acest document?

Este necorespunzător acest conținut?

Drepturi de autor:

Formate disponibile

Arcsight Logger 3.0 Training: Workshop Course Outline

Încărcat de

Drepturi de autor:

Formate disponibile

ArcSight Logger 3.

Module 1 Introduction to ArcSight Logger 3.0

o Basic features and functionality

Module 2 Initializing Logger

o Using a Web browser

Module 3 Deployment Planning

o Setting storage volumes

Module 4 Navigating Logger

o Logger gauges, menu bar, help/options

Module 5 Configuring Global Settings

o Overview of major functions of System Admin tab

Logger Training Workshop 1

Module 6 Configuring Platform Settings

Module 7 Configuring Other System Admin Settings

Module 8 Configuring Logger Input and Output

o Logger Input and Output; receivers and forwarders

Module 9 Managing Users and Groups

o Users and Groups access privileges

Module 10 Searching for Events

o Field-based and RegEx searches

Module 11 Regular Expression and Field-based Queries

o About Queries; comparing query, search, and filters

Logger Training Workshop 2

Module 12 Using Filters and Saved Searches

Module 13 Logger Reporting Functions

Module 14 Modifying Existing Reports

o Editing and Saving Reports

Module 15 Creating New Reports

o Report templates, report designer

Module 16 Using the Dashboard

o Understanding the Dashboard

Logger Training Workshop 3

17 Logger Alerts and Notifications

o Alerts (for internal Logger system events requiring attention)

Module 18 Import, Export, Backup, and Restore

Module 19 Configuring SmartConnectors

Module 20 Logger L3000 with Connector Appliance

o Connector Appliance concepts and functionality

Module 21 Using Logger in SAN Configurations

o Overview of Logger with SAN

Logger Training Workshop 4

S-ar putea să vă placă și