{"course":{"productid":33455,"modality":6,"active":true,"language":"de","title":"Installing and Configuring ArcSight Platform","productcode":"ARC4300I","vendorcode":"MF","vendorname":"OpenText","fullproductcode":"MF-ARC4300I","courseware":{"has_ekit":false,"has_printkit":true,"language":""},"url":"https:\/\/portal.flane.ch\/course\/opentext-arc4300i","objective":"<p>On completion of this course, participants should be able to:<\/p>\n<ul>\n<li>Describe the ArcSight Platform and its Architecture<\/li><li>Describe the system requirements<\/li><li>Install ArcSight Platform<\/li><li>Verify a successful installation<\/li><li>Configure ArcSight Platform to ingest events<\/li><li>Configure collectors and CTH with ArcMC<\/li><li>Configure Topics and Routes<\/li><li>Configure ESM and SOAR Integration<\/li><li>Manage ArcSight Users<\/li><li>Enable Single Sign-On<\/li><li>Add features to an existing ArcSight installation<\/li><\/ul>","essentials":"<p>To be successful in this course, you should have the following prerequisites or knowledge:<\/p>\n<ul>\n<li>ESM200 - ESM Administrator and Analyst or comparable ArcSight experience<\/li><li>Experience working with command line tools<\/li><li>Experience deploying applications in Windows and Linux environments<\/li><li>Computer desktop, browser, and file system navigation skills<\/li><li>Two Monitors to make it easy to review the guides on one screen, and the lab on the second screen<\/li><\/ul>","audience":"<p>This course is designed for Security Professionals and SOC Administrators, who are responsible for deploying and administrating the ArcSight Platform within their environment.<\/p>","contents":"<ul>\n<li>Architecture<\/li><li>System Requirements<\/li><li>YAML Files<\/li><li>Installing ArcSight Platform<\/li><li>Post-Install Activities<\/li><li>Transformation Hub Management from Fusion ArcMC<\/li><li>Producing Events and Transformation Hub Ingestion<\/li><li>Collectors and CTH Deployment from ArcMC<\/li><li>Topic and Route Management<\/li><li>Integrating ESM and SOAR<\/li><li>Enabling Single Sign-On<\/li><li>Managing Users in ArcSight<\/li><li>Adding More ArcSight Capabilities<\/li><\/ul>","outline":"<h5>Module 1: Architecture<\/h5><ul>\n<li>Describing the ArcSight Platform and its Architecture<\/li><li>Describing the underlying CDF infrastructure<\/li><li>Identifying the ArcSight Platform Capabilities<\/li><li>Explaining other related components to the Platform<\/li><li>Considerations and Best Practices<\/li><\/ul><h5>Module 2: System Requirements<\/h5><ul>\n<li>Describing the following:\n<ul>\n<li>System Requirements<\/li><li>Host Requirements<\/li><li>DNS requirements<\/li><li>NFS Requirements<\/li><li>ArcSight Database<\/li><\/ul><\/li><\/ul><h5>Module 3: YAML Files<\/h5><ul>\n<li>Configuring the ArcSight Platform YAML Files<\/li><\/ul><h5>Module 4: Installing ArcSight Platform<\/h5><ul>\n<li>Pre-installing ArcSight<\/li><li>Installing ArcSight<\/li><\/ul><h5>Module 5: Post-Install Activities<\/h5><ul>\n<li>Checking the status of the ArcSight Platform Installation<\/li><li>Accessing and exploring the ITOM Management Portal<\/li><li>Running the post-install command to finalize the deployment<\/li><li>Uploading License Files under the ITOM Management Portal<\/li><li>Logging into Fusion for the First Time<\/li><\/ul><h5>Module 6: Transformation Hub Management from Fusion ArcMC<\/h5><ul>\n<li>Validating a successful integration between Transformation Hub and the new containerized ArcMC available in Fusion<\/li><li>Retrieving the master root certificate<\/li><\/ul><h5>Module 7: Producing Events and Transformation Hub Ingestion<\/h5><ul>\n<li>Recognizing and describing how events are produced<\/li><li>Describing event formats: classic (CEF) and AVRO<\/li><li>Installing a CEF Producer and AVRO Producer of events<\/li><li>Detailed walkthrough of the configuration steps and all parameters<\/li><li>Sending Test Alerts Replay Events to Transformation Hub<\/li><li>Validating Topics and Transformation Hub Ingestion<\/li><\/ul><h5>Module 8: Collectors and CTH Deployment from ArcMC<\/h5><ul>\n<li>Defining the difference between a Collector and Connector<\/li><li>Listing the advantages of using Collectors<\/li><li>Describing what&rsquo;s needed to perform a Collector Deployment using ArcMC<\/li><li>Deploying CTH from ArcMC and route events from th-syslog to other topics<\/li><\/ul><h5>Module 9: Topic and Route Management<\/h5><ul>\n<li>Managing Topic and Routes<\/li><li>Local vs Global Event Enrichment<\/li><li>Types of Stream Processor Instances in Transformation Hub<\/li><li>Configuring Topics and Routes &ndash; Step by Step Example for Global Event Enrichment<\/li><\/ul><h5>Module 10: Integrating ESM and SOAR<\/h5><ul>\n<li>Configuring the ESM and SOAR Integration<\/li><li>Verifying a Successful Integration<\/li><\/ul><h5>Module 11: Enabling Single Sign-On<\/h5><ul>\n<li>Configuring the ESM Admin User for Single Sign-on<\/li><li>Enabling Single Sign-on<\/li><\/ul><h5>Module 12: Managing Users in ArcSight<\/h5><ul>\n<li>Managing ArcSight Users Overview<\/li><li>Managing ESM Users<\/li><li>Managing Fusion Users<\/li><li>Managing SOAR Users<\/li><li>Defining Recon User Permissions and Roles<\/li><li>Defining Intelligence User Permissions and Roles<\/li><\/ul><h5>Module 13: Adding More ArcSight Capabilities<\/h5><ul>\n<li>Describing the benefits of adding more ArcSight capabilities<\/li><li>Adding more ArcSight capabilities<\/li><li>Specify mandatory filtering on pre-defined fields or user-specified fields<\/li><li>Create lookup values for field attributes<\/li><li>Create and use parameters and parameter groups<\/li><\/ul>","summary":"<p>This instructor-led course teaches you how to install and configure ArcSight Platform 23.2 on-premise with the ArcSight Platform Installation program.<\/p>","objective_plain":"On completion of this course, participants should be able to:\n\n\n- Describe the ArcSight Platform and its Architecture\n- Describe the system requirements\n- Install ArcSight Platform\n- Verify a successful installation\n- Configure ArcSight Platform to ingest events\n- Configure collectors and CTH with ArcMC\n- Configure Topics and Routes\n- Configure ESM and SOAR Integration\n- Manage ArcSight Users\n- Enable Single Sign-On\n- Add features to an existing ArcSight installation","essentials_plain":"To be successful in this course, you should have the following prerequisites or knowledge:\n\n\n- ESM200 - ESM Administrator and Analyst or comparable ArcSight experience\n- Experience working with command line tools\n- Experience deploying applications in Windows and Linux environments\n- Computer desktop, browser, and file system navigation skills\n- Two Monitors to make it easy to review the guides on one screen, and the lab on the second screen","audience_plain":"This course is designed for Security Professionals and SOC Administrators, who are responsible for deploying and administrating the ArcSight Platform within their environment.","contents_plain":"- Architecture\n- System Requirements\n- YAML Files\n- Installing ArcSight Platform\n- Post-Install Activities\n- Transformation Hub Management from Fusion ArcMC\n- Producing Events and Transformation Hub Ingestion\n- Collectors and CTH Deployment from ArcMC\n- Topic and Route Management\n- Integrating ESM and SOAR\n- Enabling Single Sign-On\n- Managing Users in ArcSight\n- Adding More ArcSight Capabilities","outline_plain":"Module 1: Architecture\n\n\n- Describing the ArcSight Platform and its Architecture\n- Describing the underlying CDF infrastructure\n- Identifying the ArcSight Platform Capabilities\n- Explaining other related components to the Platform\n- Considerations and Best Practices\nModule 2: System Requirements\n\n\n- Describing the following:\n\n- System Requirements\n- Host Requirements\n- DNS requirements\n- NFS Requirements\n- ArcSight Database\nModule 3: YAML Files\n\n\n- Configuring the ArcSight Platform YAML Files\nModule 4: Installing ArcSight Platform\n\n\n- Pre-installing ArcSight\n- Installing ArcSight\nModule 5: Post-Install Activities\n\n\n- Checking the status of the ArcSight Platform Installation\n- Accessing and exploring the ITOM Management Portal\n- Running the post-install command to finalize the deployment\n- Uploading License Files under the ITOM Management Portal\n- Logging into Fusion for the First Time\nModule 6: Transformation Hub Management from Fusion ArcMC\n\n\n- Validating a successful integration between Transformation Hub and the new containerized ArcMC available in Fusion\n- Retrieving the master root certificate\nModule 7: Producing Events and Transformation Hub Ingestion\n\n\n- Recognizing and describing how events are produced\n- Describing event formats: classic (CEF) and AVRO\n- Installing a CEF Producer and AVRO Producer of events\n- Detailed walkthrough of the configuration steps and all parameters\n- Sending Test Alerts Replay Events to Transformation Hub\n- Validating Topics and Transformation Hub Ingestion\nModule 8: Collectors and CTH Deployment from ArcMC\n\n\n- Defining the difference between a Collector and Connector\n- Listing the advantages of using Collectors\n- Describing what\u2019s needed to perform a Collector Deployment using ArcMC\n- Deploying CTH from ArcMC and route events from th-syslog to other topics\nModule 9: Topic and Route Management\n\n\n- Managing Topic and Routes\n- Local vs Global Event Enrichment\n- Types of Stream Processor Instances in Transformation Hub\n- Configuring Topics and Routes \u2013 Step by Step Example for Global Event Enrichment\nModule 10: Integrating ESM and SOAR\n\n\n- Configuring the ESM and SOAR Integration\n- Verifying a Successful Integration\nModule 11: Enabling Single Sign-On\n\n\n- Configuring the ESM Admin User for Single Sign-on\n- Enabling Single Sign-on\nModule 12: Managing Users in ArcSight\n\n\n- Managing ArcSight Users Overview\n- Managing ESM Users\n- Managing Fusion Users\n- Managing SOAR Users\n- Defining Recon User Permissions and Roles\n- Defining Intelligence User Permissions and Roles\nModule 13: Adding More ArcSight Capabilities\n\n\n- Describing the benefits of adding more ArcSight capabilities\n- Adding more ArcSight capabilities\n- Specify mandatory filtering on pre-defined fields or user-specified fields\n- Create lookup values for field attributes\n- Create and use parameters and parameter groups","summary_plain":"This instructor-led course teaches you how to install and configure ArcSight Platform 23.2 on-premise with the ArcSight Platform Installation program.","skill_level":"Intermediate","version":"23.2","duration":{"unit":"d","value":5,"formatted":"5 Tage"},"pricelist":{"List Price":{"FR":{"country":"FR","currency":"EUR","taxrate":19.6,"price":3750},"DE":{"country":"DE","currency":"EUR","taxrate":19,"price":4000}}},"lastchanged":"2025-07-29T12:18:23+02:00","parenturl":"https:\/\/portal.flane.ch\/swisscom\/json-courses","nexturl_course_schedule":"https:\/\/portal.flane.ch\/swisscom\/json-course-schedule\/33455","source_lang":"de","source":"https:\/\/portal.flane.ch\/swisscom\/json-course\/opentext-arc4300i"}}