CourseData Sheet

ArcSight Logger - 6.0 Administration and Operations

Course description
ArcSight Logger+ 6.0 Administration and Operations course provides Course ID 00924316
you the essentials of the ArcSight Logger solution – both hardware and Course format, Typical duration Select one:
software - as well as giving you information on how to architect a VILT - Virtual Instructor Led, 5 days
complete solution. This 5 day ILT course will cover the core features of ILT - Instructor Led, 5 days
the ArcSight Logger solution as well as more advanced features. This SCA - Special Course/Activity, 5 days
course, in addition to Logger experience, prepares you for the Logger Delivery languages English
certification exam. The exam is administered on the last day of class
and is a hands-on, performance based exam. Register for this course.
For information on registering for this course, please visit the HPE Enterprise
Security University website by clicking on the link above.
Ideal candidate for this course
Typical candidates for this course are system administrators or
operators who work with Logger software or Logger Appliance.
Prerequisites:
• Complete the HP ArcSight ESM Security Analyst (AESA) training
Knowledge of:
• Common security device functions, such as IDS/IPS, Network and Host-based firewalls, etc.
• Common network device functions, such as routers, switches, hubs, etc.
• TCP/IP functions, such as CIDR blocks, subnets, addressing, communications, etc.
• Windows operating system tasks, such as installations, services, sharing, navigation, etc.
• Possible attack activities, such as scans, man in the middle, sniffing, DoS, DDoS, etc and possible abnormal activities, such as worms, Trojans,
viruses, etc.
• SIEM terminology, such as threat, vulnerability, risk, asset, exposure, safeguards, etc.
• Security directives, such as Confidentiality, Integrity, Availability

Topics
Introduction to Logger
Install and Initialize Logger Appliance
Installing and Initialize Software Logger
Navigating Logger
Logger Configuration
Configuring Logger Event Input and Output
System Admin Settings
Managing Users and Groups
Event Search
Search Tools
Filters, Saves Searches & Scheduled Alerts
Logger Reports

Objectives
This course prepares you to:
Describe, access, and use the basic features and functions of ArcSight Logger
Initialize Logger Appliance
Install and update Logger Software form factor
Explain and implement initial Logger storage and retention policy settings
Describe and configure event source devices and device groups, event Receivers, Forwarders, and Destinations
Locate and configure Network settings, error logs, remote support access and security certificate trust stores
Explain and implement event indexing and use the Logger search builder
Access and customize search field set display controls and search constraint criteria
Use filters effectively
Run and build reports
Copy and modify report queries and templates
 Copy and modify report dashboards and dashboard elements
Search, view, create, edit, enable and disable realtime and scheduled alerts; configure notifications; export alerts for further analysis
Backup and restore Logger configuration or reports and report definitions; export and import Logger Alerts and Filters; retrieve error and audit
logs

How to register
Click on this link to register for this course: https://inter.viewcentral.com/events/cust/catalog.aspx?cid=arcsight&event_id=509&pid=1
Policies, fees and cancellations
Course fees may vary and are established and collected by the training center delivering the course. Cancellation fees may apply. Contact your HPE
Authorized Training Partner for their respective policies.

For more information

Contact our program

Learning resources that were developed before the Hewlett-Packard Company separation might contain some content and brand elements that have not been updated for Hewlett Packard
Enterprise. Learning resources with the highest usage are updated.

© Copyright 2017 Hewlett Packard Enterprise. The information contained herein is subject to change without notice. The only warranties for HPE products and services are set forth in the express warranty
statements accompanying such products and services. Nothing herein should be construed as constituting an additional warranty. HPE shall not be liable for technical or editorial errors or omissions contained
herein.
Information is as of August 2017, Revision 7