Learn more about what ArcSight ESM 7.0 can do for yo
ESM 7.0 is our biggest ArcSight release in some time. Mature SOC customers have been dealing with requirements to ingest more and more data without compromising the reliability or usability of their SIEM. Our answer to that is Distributed Correlation (DC). DC decouples the core components that make up our powerful correlation engine, allowing customers to scale it out across multiple nodes in a cluster architecture. This not only allows it to handle more events per second (100,000 eps) but also improves its stability as there are fewer single points of failure. Finally, customers can focus on onboarding more data feeds for more visibility, and ultimately building more use cases around the data being collected.