New answers tagged


When onboarding device types in Arcsight, I ask customers to provide specific requirements for the log events they're trying to observe. These requirements should be driven by their infosec policies. For each of the requirements, I require them to be able to generate a sample of the log entry, or while being monitored, to generate the event which would ...

Top 50 recent answers are included