ArcSight SmartConnector event lifecycle

This another Protect conference presentations, this one focusing on the lifecycle of an event within a SmartConnector. Basically this is the answer to the question of 'what happens inside a SmartConnector?'.

I have tried to add plenty of detail and information where I can, but clearly there is a lot more information that can be added. While this presentation dates back to 2010, its still valid to today since the basic operations haven't changed significantly. Where there are differences though, I have highlighted these.

I reference the following links / documents:

ESM 101 - https://www.protect724.hpe.com/docs/D...
SmartConnector guide - https://www.protect724.hpe.com/docs/D...
SmartConnector docs - https://www.protect724.hpe.com/commun...

Any comments and questions, please leave them in the comments section. Thanks.