HDTutorial
EN
How to create a Rule in ArcSight ESM

Playback starts YouTube’s embedded player (privacy-enhanced mode).

How to create a Rule in ArcSight ESM

11,206 views November 10, 2019 15:23

Watch on YouTube
ChannelTsvetelin Kutsarov

Description from the creator

If you have found what I do interesting and if you would like me to continue you can check the link below 😊

buymeacoffee.com/nextgensiemtalks

How to create a Rule using ArcSight ESM.
This is just a simple example how to create a Standard Rule - Brute Force Login Attempt.

First step - Build your Conditions using the Common Condition Editor, using the Boolean Logical Operators (And; OR; NOT)
Second step- Define Aggregation (how events will be aggregated)
Third step- Activate trigger (how many times the rule will fire if events occure?) and specify an Action (perform automatically something)

Enjoy, like, share and subscribe for more videos!

About this tutorial

Tsvetelin Kutsarov published this 15:23 video tutorial on November 10, 2019. It has been watched 11,206 times on YouTube.

Duration
15:23
Published
November 10, 2019
Views
11,206
Likes
129

Tags

Share

This tutorial in other languages