The ArcSight ESM collects, normalizes, aggregates, and filters millions of what?

A.
Intrusions

B.
Transactions

C.
Packets

D.
Log events

Explanation:
http://www.cisco.com/c/dam/en/us/solutions/collateral/enterprise/design-zonegovernment/sbaGov_arcsightDguide.pdf