What is the main purpose of the ArcSight ESM?

A.
To archive raw event data

B.
To correlate events and provide real-time threat detection

C.
To centrally manage SmartConnector configuration

D.
To manage multiple retention policies

Explanation:
http://www8.hp.com/us/en/software-solutions/arcsight-esm-enterprise-securitymanagement/index.html