What is the main purpose of the ArcSight ESM?
A.
To archive raw event data
B.
To correlate events and provide real-time threat detection
C.
To centrally manage SmartConnector configuration
D.
To manage multiple retention policies
Explanation:
http://www8.hp.com/us/en/software-solutions/arcsight-esm-enterprise-securitymanagement/index.html