ArcSight ESM Administrator and Analyst Training

Live Online & Classroom Enterprise Certification Training

In this introductory course learners use the ArcSight console and ArcSight Command Center user interfaces to monitor security events, configure ESM, and manage users and as well as ESM network intelligence resources.

Looking for a private batch ?

REQUEST A CALLBACK

Certified Trainer
Authorized Courseware
Completion Certificate from ATP

Enterprise Reporting
Lifetime Access
CloudLabs
24x7 Support
Real-time code analysis and feedback

What is ArcSight ESM Administrator and Analyst Certification Training about?

Using ArcSight ESM workflow, participants isolate, document, escalate, and resolve security incidents.

The hands-on labs for this course use ESM version 7.0 patch 1

What are the objectives of ArcSight ESM Administrator and Analyst Certification Training ?

Upon successful completion of this course, you should be able to:

Make ArcSight ESM operational upon initial installation
Describe how ESM works in the context of your network
Create user accounts
Implement built-in content
Populate ESM with your network and assets to identify endpoints involved in an event
Create site-specific business-oriented views
Investigate, identify, analyze, and remediate exposed security issues
Use workflow management to provide real-time incident response and escalation tracking
Modify and run standard reports to provide situational awareness and network status
Establish ESM peering across multiple ESM instances
Perform distributed event search and content management

What are the prerequisites for ArcSight ESM Administrator and Analyst Certification Training?

To be successful in this course, you should have the following prerequisites or knowledge:

Working knowledge of enterprise security, event and log management

Available Training Modes

Live Online Training

30 Hours

Classroom Training

5 Days

Course Outline Expand All

Expand All

ESM Overview

List typical responsibilities and skill requirements for each ArcSight ESM User Role

Describe ESM Components

Identify ESM Communication Strategy used between various devices and components in an ESM Network

Identify various ESM Resources

Command Center

Use the ArcSight Command Center Help Facility

Navigate ArcSight Command Center functions

Reset your user password

ESM Console

Install, customize and explore the functionality of the ESM console

Connectors

Connectors gather data from various sources then send the data to ESM in the form of events.

ArcSight Marketplace

The Marketplace offers standard content packages you can install that address common business and security cases.

Schema, Fieldsets, & Active Channels

Create an Active Channel to display event information. Discuss the differences between a Live Channel, Rules Channel, and a Resource Channel.

Filters

Create a filter to narrow the data you want to monitor in ESM.

Dashboards & Data Monitors

Create Data Monitors and display them on Dashboards.

Rules & Lists

Discuss the types of rules, create a rule and apply it to a list.

User Administration

Create users and grant access to specific resources.

Notifications

Create a notification system to have various users notified when specified criteria is triggered

Workflow & Cases

Discuss how people are informed about incidents and track their responses.

Queries & Query Viewers

Create a query viewer to get a quick, high-level summary of activity.

Reports

Create reports that can be printed or viewed.

Content Management & Peering

Content management gives you the ability to push ESM content in the form of packages from a single ESM Manager to a peer ESM known as subscriber

Event Search

Search for specific events using simple to complex search techniques.

Who is the instructor for this training?

The Trainer is Micro Focus certified Instructor with extensive domain experience, including years of experience training & mentoring professionals in the industry.

ArcSight ESM Administrator and Analyst Certification Training - Certification & Exam

SpringPeople is the Authorized Training Partner of Micro Focus.

This training is aligned to below Certifications

Accredited Software Professional
Certified Software Expert

The training fees is exclusive of exam cost.

For any queries; feel free to reach us at microfocus@springpeople.com

Reviews

My outlook on training changed completely after attending SpringPeople BPC training. The content, the trainer and infrastructure at SpringPeople were top notch and perfectly in tune with the industry requirements. Regardless to say, training is now something that I look forward to to. Kudos to everyone at SpringPeople!

Shweta Priya

Sony

I attended the 3-day AngularJs training at SpringPeople. The trainer was an industry veteran with vast experience in the subject. Notably, the hands-on training, and the Q&A session stood out. Overall, I found SpringPeople a great place to learn with excellent facilities and great trainers. Would recommend SpringPeople to my colleagues and friends.

Swati Singh

I attended the training on API Design for Mulesoft. The sessions were well planned and value-laden. I benefited immensely from the hands-on experience enabled through virtual labs. I would like to specifically commend the efficiency of the support team who were always available to resolve my concerns.

Nikhil Kohli

Stryker

I attended the jQuery training batch, conducted by Mr. Vijay, an SME who did a thorough coverage of all the essentials. He took us through concepts such as jQuery animations, event handlers, plugins, and jQuery-UI by small programs, very easily. The sessions were useful and well structured. By the end of the training, I was well equipped to develop a SPA on Product Management System. Overall, the learning experience at SpringPeople was great!

Heena Rajan

Mindtree