ArcSight Logger Administration and Operations

Duration: 5 Days

Course description
ArcSight Logger Administration and Operations course provides you the
essentials of the ArcSight Logger solution – both hardware and software - as well
as giving you information on how to architect a complete solution. This 5 day ILT
course will cover the core features of the ArcSight Logger solution as well as
more advanced features. This course, in addition to Logger experience, prepares
you for the Logger certification exam. The exam is administered on the last day
of class and is a hands-on, performance based exam.

Who should attend

This course is intended for any system administrator or operator that will be
working with Logger software or Logger Appliance.

Prerequisites

To be successful in this course, you must have:

• Completed the HP ArcSight ESM Security Analyst (AESA) training
Knowledge of:
• Common security device functions, such as IDS/IPS, Network and Host-based
firewalls, etc.
• Common network device functions, such as routers, switches, hubs, etc.
• TCP/IP functions, such as CIDR blocks, subnets, addressing, communications,
etc.
• Windows operating system tasks, such as installations, services, sharing,
navigation, etc.
• Possible attack activities, such as scans, man in the middle, sniffing, DoS, DDoS,
etc and possible abnormal activities, such as worms, Trojans, viruses, etc.
• SIEM terminology, such as threat, vulnerability, risk, asset, exposure,
safeguards, etc.
• Security directives, such as Confidentiality, Integrity, Availability

Topics

Introduction to Logger
Install and Initialize Logger Appliance
Installing and Initialize Software Logger
Navigating Logger
Logger Configuration
Configuring Logger Event Input and Output
System Admin Settings
Managing Users and Groups
Event Search
Search Tools
Filters, Saves Searches & Scheduled Alerts
Logger Reports