Collector Service; Starting The Collector Manager Service; Configuring The Light Weight Collector Manager - Novell SENTINEL 6.1 SP2 - INSTALLATION GUIDE 02-2010 Installation Manual

or
UTL_FILE_DIR = [specific directory path]

5 Save the file and exit.

3.9.3 Collector Service

During the installation of the Collector Service, a Collector called the General Collector is
configured. By default, it creates events at a rate of 5 events per second (eps). This Collector can be
used to test the installation. Additional Collectors can be downloaded from the
(http://support.novell.com/products/sentinel/collectors.html).

3.9.4 Starting the Collector Manager Service

1 Start Sentinel 6.1.
2 Click Admin > Servers View.
You can also click Servers View in the Navigator pane.
3 Expand the Servers view.
The list of processes is displayed.
4 Right-click the Collector Manager that you want to start, then select Actions > Start.
Alternatively, click Event Source Management > Live View. Right-click the Collector Manager that
you want to start, then select Start.

3.9.5 Configuring the Light weight Collector Manager

The EventRouter component of the Collector Manager handles internal functions such as processing
maps and applying global filters on the events parsed by the Collector Manager. These processes can
cause high CPU and RAM usage on a remote system.
With Sentinel 6.1 SP1 Hotfix 2 and later, you can configure a lightweight version of the Collector
Manager on remote systems that have limited CPU and RAM. The internal functions of a
Lightweight Collector Manager (LWCM) are handled by the Sentinel server (or whichever system is
running DAS), so they consume less CPU and RAM on the remote system.
The EventRouter must be configured to operate in server and client modes on the DAS system and
Collector Manager system. The Collector Manager system on which the EventRouter is configured
to run in the client mode is referred to as the LWCM.
"Configuring the LWCM on the DAS Machine" on page 56

 "Configuring the LWCM on the Collector Manager Machine" on page 58
Configuring the LWCM on the DAS Machine
The EventRouter must be configured to run in the server mode. This enables the DAS Query
container to provide centralized event routing for multiple LWCMs.
The
das_query.xml
EventRouter. By default, the EventRouter section is commented in the
56 Sentinel 6.1 Installation Guide
file under the
<ESEC_HOME>/config
Novell Web site
folder contains a preconfigured
das_query.xml
file.