9.1.2 Configuring ArcSight Intelligence Details

The following information helps you to configure the ArcSight Intelligence details.

Field

Description

Status

Use the slider to set the ArcSight Intelligence status to enable or disable. Setting this option to enable implies that you want to consider risk score for allowing access to the user and for refreshing the risk data.

AWS Access Key ID

The AWS access key ID to access the ArcSight Intelligence URL.

AWS Secret Access Key

The AWS secret access key to access the ArcSight Intelligence URL.

AWS Region

The AWS region where ArcSight Intelligence is deployed.

AWS Bucket

Amazon S3 buckets, which are similar to file folders, store objects, which consist of data and its descriptive metadata.

AWS Path/Base Folder

Path/folder containing the risk files.

Risk Threshold

Maximum risk score allowed.

Allow Emergency Access

Set it to on or off using the slider, if you want to allow emergency access for users with the above risk threshold

Allow Access on Unknown Risk

Allow access to the user because risk score is unavailable.

Frequency

Set the daily frequency at which you want to refresh in hours and minutes.

Next Refresh Time

Displays the upcoming scheduled refresh time.

Last Refreshed Time

Displays the last time when data was refreshed.

Refresh Now

Allows you to refresh in real time to get the most current data.