ArcSight Logger - Basics

If you want to get information from ArcSight Logger, there are two main ways of doing so:

• Searching
  • Simple
  • Fast
  • Can be saved, but
  • Less robust than a report
  • Harder to run, easier to write

Searches can be found under the menu: Analyze > Search

• Reports
  • More powerful
  • More customizable
  • Can be saved and run over and over again
  • Writing a new report requires some SQL knowledge
    • Each report is based on a SQL query
  • Easy to run, hard to write

Reports can be found under the menu: Reports