Term
| What does the acronym .ARB stand for? |
|
Definition
|
|
Term
| Does an inline filter query the database? |
|
Definition
| No. Inline filters do not query the database, they simply |
|
|
Term
| What does a debugging filter go? |
|
Definition
|
|
Term
| Name three (of the four) filters that active channels allow. |
|
Definition
Filter Resource
Unnamed Local Filter
Inline Filters
Event-Based Filters |
|
|
Term
| SMARTCONNECTOR: By default, what is the cache size of a SmartConnector |
|
Definition
|
|
Term
| SMARTCONNECTOR: What is the default heartbeat frequency for a SmartConnector |
|
Definition
|
|
Term
| SMARTCONNECTOR: Excluding disabled, what is the minimum bandwidth a SmartConnector can be configured for? |
|
Definition
|
|
Term
| LOGGER: How many storage groups can be configured in ArcSight Logger? |
|
Definition
|
|
Term
| LOGGER: Each storage Group within Logger must maintain the same retention and storage policy? T/F |
|
Definition
| False. At time of this writing (9/13/2011) ArcSight is the only vendor that offers this functionality. |
|
|
Term
| What does the acronym CIP stand for? |
|
Definition
| Compliance Insight Package. |
|
|
Term
| Name the two types of rules in ESM? |
|
Definition
|
|
Term
| How many categories of data monitors are there? |
|
Definition
|
|
Term
| Name the three categories of data monitors? |
|
Definition
| Event Based, Non event based, and correlation. |
|
|
