The Manager to which your Console is connected has pre-built query viewers available for use. At a minimum, you have access to standard content query viewers that ship with ArcSight. You might also have access to custom query viewers provided by content developers for your organization.
ArcSight comes with a set of pre-built query viewers that address common network monitoring and trend analysis scenarios.
To access the standard content query viewers:
Refer to the ArcSight Administration and ArcSight System Standard Content Guide for the descriptions of the pre-built queries in this query viewer group.
For information on how to run and use any pre-built query viewer, see Viewing Query Viewer Results, Generating Reports from Query Viewers, and Defining and Using Baselines.
When administrators or content developers at your organization create custom query viewers, they have the option of sharing these with other administrators and users. So, depending on your role and user permissions, you might have access to:
Query viewers that ship with ArcSight
Custom-built query viewers that other administrators have shared with other ESM users
Your own custom-built query viewers
For information on how to create your own custom query viewers, see Managing Query Viewers.