If you want to get information from ArcSight Logger, there are two main ways of doing so:
- Searching
- Simple
- Fast
- Can be saved, but
- Less robust than a report
- Harder to run, easier to write
Searches can be found under the menu: Analyze > Search
- Reports
- More powerful
- More customizable
- Can be saved and run over and over again
- Writing a new report requires some SQL knowledge
- Each report is based on a SQL query
- Easy to run, hard to write
...