ArcSight Logger 助力高效日志分析
ArcSight Logger是MicroFocus SIEM平台的产品之一，它提供实时数据流并将其分类为特定日志，便于与安全操作集成。无论组织规模大小，均可利用其高性能的日志数据存储库加速IT运营、应用开发及网络安全问题的取证分析，并同时应对多种法规要求。
ArcSight Logger is one of products from Micro Focus SIEM platform. It streams real-time data and categorizes them into specific logs and easily integrates with Security Operations. As a result, organizations of any size can use this high performance log data repository to aid in faster forensic analysis of IT operations, application development, and cyber security issues, and to simultaneously address multiple regulations.
Summary
Analyzer
Search
Live Event Viewer
Dashboard
Reports
Configuration
Search Example:
sourceAddress=10.1.1.2 and name startswith “TCP” and name contains “DEN” | fields requestUrl
References:
扫一扫
450
被折叠的 条评论
为什么被折叠?
到【灌水乐园】发言
