Novell SENTINEL 6.1 SP2 - 02-2010 User Manual page 342

There are special considerations for installing certain types of content, including Correlation Rules
and Reports; these issues are described below.
Correlation Rules and Actions
Correlation Rules are deployed to a specific correlation engine. During the Control installation, the
following screen shows the correlation engines in the target Sentinel system and the rules that are
already running on those engines. Based on the number and complexity of the rules running on the
engines, you can decide which correlation engine to which you will deploy the Correlation Rule.
Correlation rules will deploy in an Enabled or Disabled state, depending on their status in the source
Sentinel system when the Solution Pack was created.
If an Execute Script Correlation Action (created in Sentinel 6.0) is associated with the Correlation
Rule, the Solution Manager attempts to install the associated JavaScript code on all correlation
engines. If any of the correlation engines is unavailable, a message displays.
Install Control Wizard-Select Correlation Engine
Figure 15-4
You can cancel the Control's installation and fix the problem or continue installation on only the
available correlation engine(s).
342 Sentinel 6.1 User Guide