Building Trends

A trend is an ArcSight resource that defines how and over what time period data are aggregated and evaluated for tendencies and patterns. A trend executes a specified query on a defined schedule and time duration.

The ArcSight trends engine evaluates source data for trends based on:

Trends can be used as the primary data source for a report, or used as the data source input to another query which is then used in a report (perhaps along with other queries or trends).

See also: