ArcSight ESM

The One ArcSight MSSP Program Usage Reports display daily average EPS metrics from events that have been received from ArcSight Smart connectors during a specified date range.

The ArcSight Classic MSSP Program Usage Report package is not compatible with the reports provided with the One ArcSight MSSP Program. Please use the One ArcSight report package available in the MarketPlace > ArcSight Utilities and Tools directory..

The package contains the following resources:

/All Rules/ArcSight Solutions/MSSP Usage Report/Event Counts Detected

Writes event counts to an active list when triggered by agent:050 events.
/All Active Lists/ArcSight Solutions/MSSP Usage Report/Events Count

Stores events counts for each Partner per day.
/All Reports/ArcSight Solutions/MSSP Usage Report/Daily EPS Usage for All Customers

Displays the daily average events per second (EPS) history for all Partners for the specified time period.
/All Reports/ArcSight Solutions/MSSP Usage Report/One ArcSight MSSP Program Usage Report

Displays the aggregated daily average of events per second (EPS). The aggregated value represents the combined average of all days within the specified time period.

You can export this report for submission to Micro Focus in accordance with your MSSP contract by emailing the report to msspcyberres@microfocus.com. If you need assistance, contact Support.

ESM generates the EPS usage reports from event counts in the active list, which uses real-time rules. As a result, the report will not include data older than the date that you installed the package.