When ArcSight ESM EPS usage exceeds, are events discarded?
Cybersecurity
DevOps Cloud
IT Operations Cloud
When ArcSight ESM EPS usage exceeds, are events discarded?
Hello Louis Lai ,
If EPS exceeds the license capacity, ESM will not discard new events.
However, ESM will start notifying you about that. If three or more consecutive MMEPS value indicators exceed their capacity based on the purchased license, the license is considered to be out of compliance.
Hope this helps.
Mladen
Hi, Mladen
Thank you very much for your reply. I will also inform my client that they must comply with the regulations.
Wishing you a good day.
Louis
Thanks for detailed reply,
in case of non-compliance license " Will Affect the performance or some function will be disable - Prepertual-"
Ali Maher