HPE ArcSight ESM Simple rule creation

This is a simple demo video of the way that you create and run a correlation rule with ArcSight ESM. Please note the correlation rule is a simple one and what is often known as an “aggregation rule“. This is the simplest type, but its great to show for a demo about how its all drop downs and clicks, rather than searching, writing Regex or anything like that.