Sunday, July 18, 2010

ArcSight PS bootcamp

Hi again,

first part of the summer training done, ArcSight PS Bootcamp in London. It was a good training specially for all the extra information provided by the instructor Mark Jonhston, who add great value with all his real life experience.

Specially interesting for me was the flexconnector training. How to create your own parsers for unsupported devices and in my opinion the capabilities of the flexconnectors development in ArcSight is great. Not only the tools to help with the parser creation, but specially the fact of having some "customStrings" you can use in case no other field matches your needs. This makes the development very flexible.

Øyvind and me made the best of course and we learnt as much as we could :)

No comments:

Post a Comment