ESA Config: Overview

Document created by RSA Information Design and Development on Apr 26, 2016Last modified by RSA Information Design and Development on Feb 9, 2017
Version 2Show Document
  • View in full screen mode
  

This topic provides an overview of the Event Stream Analysis module.

The Security Analytics Event Stream Analysis (ESA) service provides advanced stream analytics such as correlation and complex event processing at high throughputs and low latency. It is capable of processing large volumes of disparate event data from Concentrators.

ESA's advanced Event Processing Language allows you to express filtering, aggregation, joins, pattern recognition and correlation across multiple disparate event streams. Event Stream Analysis helps to perform powerful incident detection and alerting.

The following diagram shows the workflow:

Next Topic:Configure ESA
You are here
Table of Contents > Event Stream Analysis (ESA Overview

Attachments

    Outcomes