This document contains system health metrics for Arcsight including CPU and memory utilization for various components, database space usage, logger space usage, active partitions, number of agents caching events, archived files deleted, top firing rules, rule status, and an Arcsight analyst task list summary which includes the number of reports generated, real time alerts, missed alerts, pending reports, and backup status.
This document contains system health metrics for Arcsight including CPU and memory utilization for various components, database space usage, logger space usage, active partitions, number of agents caching events, archived files deleted, top firing rules, rule status, and an Arcsight analyst task list summary which includes the number of reports generated, real time alerts, missed alerts, pending reports, and backup status.
Copyright:
Attribution Non-Commercial (BY-NC)
Available Formats
Download as XLS, PDF, TXT or read online from Scribd
This document contains system health metrics for Arcsight including CPU and memory utilization for various components, database space usage, logger space usage, active partitions, number of agents caching events, archived files deleted, top firing rules, rule status, and an Arcsight analyst task list summary which includes the number of reports generated, real time alerts, missed alerts, pending reports, and backup status.
Copyright:
Attribution Non-Commercial (BY-NC)
Available Formats
Download as XLS, PDF, TXT or read online from Scribd
Manager -Memory Utlisation Database -CPU Utilisation Database -Memory Utilisation Logger -CPU Utilisation Logger -Memory Utilisation Arcsight Database Space @ 12:00 AM @ 4:00 AM @ 08:00 AM @ 12:00 PM Arc_Event_Data Arc_Event_Index Free space in /Archive Free space in /Backup Free space in /Online Logger Space @ 12:00 AM @ 4:00 AM @ 08:00 AM @ 12:00 PM Storage Group1 Storage Group2 Arcsight System Administration ` Arcsight Partition@4PM active partition Agents caching events@ 8 PM count Archived Files more than 3 months old deleted @ 8 PM Filename NA <Date> Partial Matching Rules Top Firing Rules Rule Status@4PM ! ThreshoId VaIue NormaI aboveThreshoId VaIue > 80% > 80% > 80% > 80% > 80% > 80% ! ! < 70 % < 70 % < 1 T < 350 G < 99 G ! ! < 70 % < 70 % egend Arcsight Analyst Task List - Summary -<Date> Number of Reports generated from Arcsight Number of real time alerts based on signatures Number of real time alerts based on event count dashboards Number of real time alerts missed during the shift later identified by next shift or by customer Daily reports - pending to do Backup of ESM and Logger Status .943 17 NA 7 NA 1 NA NIL NA completed NA Started NA