Pre-Built and Custom Query Viewers

The Manager to which your Console is connected has pre-built query viewers available for use. At a minimum, you have access to standard content query viewers that ship with ArcSight. You might also have access to custom query viewers provided by content developers for your organization.

Standard Content

ArcSight comes with a set of pre-built query viewers that address common network monitoring and trend analysis scenarios.

To access the standard content query viewers:

1. In the Navigator panel select Query Viewers.
2. Click to expand the list.
3. Locate and select Query Viewers/Shared/All Query Viewers.

Refer to the ArcSight Administration and ArcSight System Standard Content Guide for the descriptions of the pre-built queries in this query viewer group.

For information on how to run and use any pre-built query viewer, see Viewing Query Viewer Results, Generating Reports from Query Viewers, and Defining and Using Baselines.

Custom Query Viewers

When administrators or content developers at your organization create custom query viewers, they have the option of sharing these with other administrators and users. So, depending on your role and user permissions, you might have access to:

• Query viewers that ship with ArcSight

• Custom-built query viewers that other administrators have shared with other ESM users

• Your own custom-built query viewers

For information on how to create your own custom query viewers, see Managing Query Viewers.