Course: ESM310-76-CE

ArcSight ESM Advanced Administrator with Certified Expert Exam

Virtual Instructor Led Training

Authorised OpenText Trainer

Difficulty Rating

Course Duration: 5 Days

The participants will obtain certificates signed by OpenText (course completion).

The exam is administered on the last day of the instructor-led class and is a hands-on, performance based exam. The VILT offering does not include a certification exam.

Course Description

This course covers how to plan and install ArcSight ESM in Compact and Distributed Mode. You will also learn how to install and configure SmartConnectors, Forwarding Connectors, Syslog Connectors, customize ESM and the Console, configure Storage Groups, backup and restore ESM, and manage certificates.

The last day of class offers a hands-on exam. Passing the exam awards you with Certified Expert badge.

Upon successful completion of this course, you should be able to:

  • Identify the ESM communication strategy used between the various devices and components within an ESM Network

  • Define each ESM operation modes and components, Compact and Distributed, and the issues ESM Distributed Mode comes to solve

  • Plan, install, and run ESM in Distributed Mode

  • Identify functions and navigate the Command Center UI

  • Install and customise the ESM console

  • Install and configure ArcSight SmartConnectors

  • Install and configure a Forwarding Connector

  • Import Zone and Asset information with the Network Model wizard

  • Customise ArcSight ESM using the properties files

  • Describe and install ArcSight upgrades and patches

  • Configure and manage storage groups

  • Describe CORRE daily job archives

  • Recognise how to Back up and restore ESM

  • Describe and deploy uses of SSL technology in ArcSight ESM

Modules

  1. Introduction to ESM Components

  2. ESM Distributed Components

  3. Installing ESM Distributed Mode

  4. Maintaining ESM Properties Files and Upgrades

  5. Installing the ESM Console

  6. Installing SmartConnectors

  7. Managing the Network Model

  8. Configuring SmartConnector Destinations

  9. Installing the ESM Super and Syslog Connectors

  10. SmartConnectors Configurations and Advanced Features

  11. Command Center

  12. ESM Backup and Restore

  13. Certificate Management

Intended Audience

This course is intended for Administrators who:

  • Install, maintain, and troubleshoot ESM components

  • Design and implement integrations between ArcSight ESM and other ArcSight products

  • Proactively investigate the health of the ESM CORRE environment

Recommended Skills

  • Knowledge of ESM Concepts

  • 6 Months ArcSight Administration Experience (minimum)

  • Database SQL statements experience

  • Linux Administration experience

  • Successful Completion of ArcSight ESM Administrator & Analyst Course or Equivalent Experience