dinesh.kudahett Absent Member.
Absent Member.
1284 views

Does anyone have ESM and Logger training course material?

Jump to solution

Does anyone have ESM and Logger training course material?

Labels (2)
0 Likes
1 Solution

Accepted Solutions
Micro Focus Expert
Micro Focus Expert

Re: Does anyone have ESM and Logger training course material?

Jump to solution

Hello Dinesh,

Good places to start:

https://www.protect724.hpe.com/search.jspa?q=training

Best regards,

Lar

0 Likes
14 Replies
Micro Focus Expert
Micro Focus Expert

Re: Does anyone have ESM and Logger training course material?

Jump to solution

Hello Dinesh,

Good places to start:

https://www.protect724.hpe.com/search.jspa?q=training

Best regards,

Lar

0 Likes
SIEM-TECH Honored Contributor.
Honored Contributor.

Re: Does anyone have ESM and Logger training course material?

Jump to solution

Dinesh,

There's a ton of info on here as noted above if you search for it.  Also, youtube activity has picked up a bit, you can find a lot on there now.  Paul Brettle  has some good training here: Paul Brettle - YouTube

-Mike

0 Likes
scottlsattler
New Member.

Re: Does anyone have ESM and Logger training course material?

Jump to solution

I talked to the Arcsight Education manager at protect and gave him an earful, paying a few grand to go over the manual is beyond boneheaded. We need more advanced uses for the product....We have the manual, we read it, perhaps HP can do a little more than cover the manual....

0 Likes
Arcsight_Logger_User Super Contributor.
Super Contributor.

Re: Does anyone have ESM and Logger training course material?

Jump to solution

Agree. No doubt Arcsight can do a lot but the learning curve is steep and almost all of the time the users are left to fend for themselves. Support is next to useless sorry.

And some basic functionality is not even in. i.e. Use of lookup files in report generation which other SIEMs such as RSA's old Envision already did out of the box and was intuitive.

If this continues, Arcsight will rapidly become irrelevant.

0 Likes
Micro Focus Expert
Micro Focus Expert

Re: Does anyone have ESM and Logger training course material?

Jump to solution

As in ANY enterprise product Education is key. So insure that you engage the education team.

With that said:

There are almost 1700 downloads of ArcSight Logger in 2 hours from the Protect724 website.

I authored this document to help individuals walk thru a use case from start to finish.

I am aware of several sites that now use it as their initial instruction for new L1 hires to familiarize them with the basic approach to ArcSight Content

Shortly ArcSight ESM in 4 hours will also hit the street.

I have had several folks ask for it in advance and they have been reviewing the document. Most edits complete and publish shortly.

Here is the link to ArcSight Logger in 2 hours.

Feedback is always welcome and encouraged.

Brian Wolff

Strategic Architect ArcSight Americas

Just updated to Logger 6.3 Screen Shots and minor adjustments for ADP 2.0 Release

New Link

0 Likes
scottlsattler
New Member.

Re: Does anyone have ESM and Logger training course material?

Jump to solution

Great, can you also fix the product so it returns data in minutes instead of days.....

We would like it to return data in less than 5 minutes like our datalake does....

0 Likes
Micro Focus Expert
Micro Focus Expert

Re: Does anyone have ESM and Logger training course material?

Jump to solution

Very long times are not the norm for the customers I work with.

Support is of course your primary resource.

But if you could frame up the situation and email me direct at Brian.Wolff@HPE.com I will be happy to take a quick look at your situation.

0 Likes
scottlsattler
New Member.

Re: Does anyone have ESM and Logger training course material?

Jump to solution

Perhaps others can chime on on how long logger takes to return results.....like a simple show me all traffic to one IP dest over 72 hours type of query...

0 Likes
Micro Focus Expert
Micro Focus Expert

Re: Does anyone have ESM and Logger training course material?

Jump to solution

What version of Logger are you running?

0 Likes
scottlsattler
New Member.

Re: Does anyone have ESM and Logger training course material?

Jump to solution

fifty loggers (well plus or minus one as they need to be bounced every other day).... on latest version in a peered environment...

0 Likes
Micro Focus Expert
Micro Focus Expert

Re: Does anyone have ESM and Logger training course material?

Jump to solution

all 50 are peered?

- see page 30

If you create a ticket, please send me the case ID.

0 Likes
Micro Focus Expert
Micro Focus Expert

Re: Does anyone have ESM and Logger training course material?

Jump to solution

Scott,

Thank you for your response.

Can you please provide me with your company name, would like to be proactive and review your tickets.

Thanks

Brian

0 Likes
Highlighted
Valued Contributor.. shazri.azizan@h1 Valued Contributor..
Valued Contributor..

Re: Does anyone have ESM and Logger training course material?

Jump to solution

Not exactly full training but some very useful material and videos, some which may help with specific tasks:

0 Likes
Micro Focus Expert
Micro Focus Expert

Re: Does anyone have ESM and Logger training course material?

Jump to solution

As promised I released ArcSight ESM in 4 hours today.

You can view it at this location.

0 Likes
The opinions expressed above are the personal opinions of the authors, not of Micro Focus. By using this site, you accept the Terms of Use and Rules of Participation. Certain versions of content ("Material") accessible here may contain branding from Hewlett-Packard Company (now HP Inc.) and Hewlett Packard Enterprise Company. As of September 1, 2017, the Material is now offered by Micro Focus, a separately owned and operated company. Any reference to the HP and Hewlett Packard Enterprise/HPE marks is historical in nature, and the HP and Hewlett Packard Enterprise/HPE marks are the property of their respective owners.