Forum Discussion

vpletcher_12267's avatar
vpletcher_12267
Icon for Nimbostratus rankNimbostratus
Jun 27, 2013

analytics with arcsight

Has anyone setup the analytics with the arcsight logger and is able to get readable reports?

 

I am logging to arcsight because the BigIP appliance itself is very limited in the amount of data it can hold and takes forever to run a report. However, I cant any reports like the ones I was getting from the F5(such as server and node latency per web page etc). I liked the F5 reports, I just need to recreate them on Arcsight. Has anyone done this and can help me out?

 

 

Vince

 

1 Reply

  • I don't think this is possible. AVR holds and processes it's data in an internal database and I don't believe you could replicate this is any useable way. You could of course log various statistics yourself via HSL and iRules (or even just SNMP) but you'd still need to try and duplicate their collation and display etc.

     

    Would the Centralised Analytics Module for EM not be a better bet?