Community Manager Community Manager
Community Manager

Learn more about what ArcSight ESM 7.0 can do for yo

ESM 7.0 is our biggest ArcSight release in some time.  Mature SOC customers have been dealing with requirements to ingest more and more data without compromising the reliability or usability of their SIEM. Our answer to that is Distributed Correlation (DC).  DC decouples the core components that make up our powerful correlation engine, allowing customers to scale it out across multiple nodes in a cluster architecture.  This not only allows it to handle more events per second (100,000 eps) but also improves its stability as there are fewer single points of failure.  Finally, customers can focus on onboarding more data feeds for more visibility, and ultimately building more use cases around the data being collected.  

If you are not familiar with what a use case is, in terms of your ESM SIEM, here is a great tech brief introducing you to the concept: More Sources More Use Cases Equals More Secure.


Labels (1)
0 Replies
The opinions expressed above are the personal opinions of the authors, not of Micro Focus. By using this site, you accept the Terms of Use and Rules of Participation. Certain versions of content ("Material") accessible here may contain branding from Hewlett-Packard Company (now HP Inc.) and Hewlett Packard Enterprise Company. As of September 1, 2017, the Material is now offered by Micro Focus, a separately owned and operated company. Any reference to the HP and Hewlett Packard Enterprise/HPE marks is historical in nature, and the HP and Hewlett Packard Enterprise/HPE marks are the property of their respective owners.