Course Overview
This course is designed to provide ArcSight System Administrators with the foundational and hands-on skills needed to effectively centralize the administration and monitoring of various ArcSight components, such as Transformation Hub, Logger, SmartConnectors, FlexConnectors, and other standalone ArcSight Management Center (ArcMC) devices in the ArcSight ecosystem.
It covers ArcMC version 24.1: Core ArcMC (formerly known as Fusion) and Software ArcMC (standalone).
Highlights:
- Installing and Configuring Software ArcMC
- Configuring Core ArcMC in an ArcSight Platform instance
- Centrally Configuring, Monitoring and Deploying Connectors
- Using Configuration Templates to facilitate the administration of ArcSight Components
- Tools to manage user and groups in standalone ArcMCs and Loggers
- Implement monitoring of various metrics for ArcSight components and devices
Who should attend
System Administrators interested in managing ArcSight components centrally.
Prerequisites
To be successful in this course, you should have the following prerequisites or knowledge:
- Familiar with the installation and configuration of ArcSight Connectors
- Basic understanding of ArcSight Logger functionality such as event searches, Receivers and User Management
- Basic understanding of the ArcSight Platform Solution and Transformation Hub component
Course Objectives
On completion of this course, participants should be able to:
- Describe ArcMC product features
- Perform the installation and administration of standalone ArcMC devices
- Perform the configuration of Core ArcMC in an ArcSight Platform instance
- Implement Role-based access to manage users and groups for Loggers and ArcMCs
- Identify the scenarios for using ArcMC Node Management and Configuration Management features
- Perform rapid installation of connectors using ArcMC Instant Connector Deployment feature
- Centrally enable monitoring and alerts for managed ArcSight components
- Create Configuration Templates to rapid configure subscribers and identify non-compliant managed components.
- Understand the upgrade process for Connectors, Loggers and standalone ArcMCs
Course Content
- Introduction to Product Features and Architecture
- Installing Software ArcMC (Non-Containerized)
- System Administration for ArcMC (Non-Containerized)
- Node Management with Fusion ArcMC (Containerized) – ArcMC and Logger Nodes
- Node Management – Importing Hosts with Connectors using Core and Software ArcMC Consoles
- Node Management – Managing Connector Parameters using ArcMC Console
- Configuration Management
- Managing Users on Managed Products
- Documenting Capabilities in ArcSight Platform Instance
- Managing Transformation Hub - Importing Host in Core ArcMC
- Managing Transformation Hub – Routing Events Between Topics
- Managing Breach Rules and Monitoring Dashboards in ArcMC
- Generator ID Management in ArcMC
- ArcMC Product Administration – Application Tools
- ArcMC Product Administration – Repositories and Node Upgrades
English