Hello.
Perhaps a slightly incorrect question, but nevertheless.
Can I use global variables in ArcSight - is this a best practice?
Thank you in advance
Bohdan
Cybersecurity
DevOps Cloud
IT Operations Cloud
If an answer to your question is correct, click on "Verify Answer" under the "More" button. The answer will now appear with a checkmark. Please be sure to always mark answers that resolve your issue as verified. Your fellow Community members will appreciate it! Learn more.
Hello.
Perhaps a slightly incorrect question, but nevertheless.
Can I use global variables in ArcSight - is this a best practice?
Thank you in advance
Bohdan
Hi - it can depend on how you're trying to use it. But take a look starting at page 70 of the ESM 101 guide on how correlation uses local and global variables - https://www.microfocus.com/documentation/arcsight/arcsight-esm-7.7/pdfdoc/ESM_101/ESM_101.pdf