ArcSight ESM

The Partner Pay-per-use 2021 License Reporting for ESM Package (the EPS usage report) is a report that displays daily average EPS metrics about events that have been received from ArcSight SmartConnectors during a specified date range.

You can export this report for submission to Micro Focus. In accordance with your MSSP contract with Micro Focus, email the report to msspcyberres@microfocus.com.

The MSSP Reports package contains the following resources:

• /All Rules/ArcSight Solutions/MSSP Usage Report/Event Counts Detected

  Writes event counts to an active list when triggered by agent:050 events.

• /All Active Lists/ArcSight Solutions/MSSP Usage Report/Events Count

  Stores events counts for each Partner per day.

• /All Reports/ArcSight Solutions/MSSP Usage Report/Daily EPS Usage for All Customers

  Displays the daily average events per second (EPS) history for all Partners for the specified time period.

• /All Reports/ArcSight Solutions/MSSP Usage Report/MSSP Aggregated License Report

  Displays the aggregated daily average of events per second (EPS). The aggregated value represents the combined average of all days within the specified time period.

ESM generates the EPS usage reports from event counts in the active list, which uses real-time rules. As a result, the report will not include data older than the date that you installed the package.