ArcSight ESM Administrator and Analyst Training Logo

ArcSight ESM Administrator and Analyst Training

Live Online & Classroom Enterprise Certification Training

Powered By

Micro Focus Logo

In this introductory course learners use the ArcSight console and ArcSight Command Center user interfaces to monitor security events, configure ESM, and manage users and as well as ESM network intelligence resources.

ATP_Authorized Logo

Powered By

Micro Focus Logo

Looking for a private batch ?

REQUEST A CALLBACK

Need help finding the right training?

Your Message

  • Certified Trainer

  • Authorized Courseware

  • Completion Certificate from ATP

  • Enterprise Reporting

  • Lifetime Access

  • CloudLabs

  • 24x7 Support

  • Real-time code analysis and feedback

What is ArcSight ESM Administrator and Analyst Certification Training about?

Using ArcSight ESM workflow, participants isolate, document, escalate, and resolve security incidents.

The hands-on labs for this course use ESM version 7.0 patch 1

What are the objectives of ArcSight ESM Administrator and Analyst Certification Training ?

Upon successful completion of this course, you should be able to:

  • Make ArcSight ESM operational upon initial installation
  • Describe how ESM works in the context of your network
  • Create user accounts
  • Implement built-in content
  • Populate ESM with your network and assets to identify endpoints involved in an event
  • Create site-specific business-oriented views
  • Investigate, identify, analyze, and remediate exposed security issues
  • Use workflow management to provide real-time incident response and escalation tracking
  • Modify and run standard reports to provide situational awareness and network status
  • Establish ESM peering across multiple ESM instances
  • Perform distributed event search and content management

What are the prerequisites for ArcSight ESM Administrator and Analyst Certification Training?

To be successful in this course, you should have the following prerequisites or knowledge:

  • Working knowledge of enterprise security, event and log management

Available Training Modes

Live Online Training

30 Hours

Classroom Training

5 Days

Course Outline Expand All

Expand All

  • List typical responsibilities and skill requirements for each ArcSight ESM User Role
  • Describe ESM Components
  • Identify ESM Communication Strategy used between various devices and components in an ESM Network
  • Identify various ESM Resources
  • Use the ArcSight Command Center Help Facility
  • Navigate ArcSight Command Center functions
  • Reset your user password
  • Install, customize and explore the functionality of the ESM console
  • Connectors gather data from various sources then send the data to ESM in the form of events.
  • The Marketplace offers standard content packages you can install that address common business and security cases.
  • Create an Active Channel to display event information. Discuss the differences between a Live Channel, Rules Channel, and a Resource Channel.
  • Create a filter to narrow the data you want to monitor in ESM.
  • Create Data Monitors and display them on Dashboards.
  • Discuss the types of rules, create a rule and apply it to a list.
  • Create users and grant access to specific resources.
  • Create a notification system to have various users notified when specified criteria is triggered
  • Discuss how people are informed about incidents and track their responses.
  • Create a query viewer to get a quick, high-level summary of activity.
  • Create reports that can be printed or viewed.
  • Content management gives you the ability to push ESM content in the form of packages from a single ESM Manager to a peer ESM known as subscriber
  • Search for specific events using simple to complex search techniques.

Who is the instructor for this training?

The Trainer is Micro Focus certified Instructor with extensive domain experience, including years of experience training & mentoring professionals in the industry.

Course Logo

ArcSight ESM Administrator and Analyst Certification Training - Certification & Exam

SpringPeople is the Authorized Training Partner of Micro Focus.

This training is aligned to below Certifications

  • Accredited Software Professional
  • Certified Software Expert


The training fees is exclusive of exam cost.

For any queries; feel free to reach us at microfocus@springpeople.com


Reviews