ESA Config: Overview

Document created by RSA Information Design and Development Employee on Oct 23, 2017Last modified by RSA Information Design and Development Employee on Jan 30, 2019
Version 3Show Document
  • View in full screen mode

This topic provides an overview of the Event Stream Analysis module.

The Security Analytics Event Stream Analysis (ESA) service provides advanced stream analytics such as correlation and complex event processing at high throughputs and low latency. It is capable of processing large volumes of disparate event data from Concentrators.

ESA's advanced Event Processing Language allows you to express filtering, aggregation, joins, pattern recognition and correlation across multiple disparate event streams. Event Stream Analysis helps to perform powerful incident detection and alerting.

The following diagram shows the workflow:

Next Topic:Configure ESA
You are here
Table of Contents > Event Stream Analysis (ESA) Overview