We are going to be standing up several sites nationwide in the near future and I would like to find out what is the best way to add them in ArcSight so that we can monitor them at all times.
These will be "cold storage" sites with one terminal per site and will probably be physically removed off-line at the end of each business day.
We need to be able to monitor them at all times, i.e. we need to be able to see when they come back on-line, when was the last time they were on-line, etc.
I believe I would need to set up a zone in Arcsight or a group or something to include all the sites collectively and set up a general filter or rule(s) on the group for central administration. Any help on this would be greatly appreciated.
Thank you
Start Free Trial
