Distributed Correlation

ESM 7.0 combines the most powerful SIEM correlation engine with distributed

node/cluster technology.

Now ESM can scale like never before, analyzing up to 100,000 events each second.

​

 

 

Cluster view

The ArcSight Command Center’s cluster view option demonstrates how

ESM 7.0 decouplesthe components used in advanced correlation

processes so that customers can now add more nodes to the ESM cluster.

​

 

 

ArcSight portfolio architecture

ArcSight Enterprise Security Manager 7.0 sits centrally in an organization,

collecting and analyzing events from across systems and security tools.

It detects security threats in real time so that analysts respond quickly,

and it scales to meet demanding security requirements.

​

 

​

​

​

​

​

​

​

​

​

​

​

​

​

​

​

​

​