Novell SENTINEL 6.1 SP2 - 02-2010 User Manual page 38

Figure 2-3
In the event when there are more than 750 per 30-second time period, a red separation line
displays indicating that there are more events than what is displayed. The other events can
be viewed by using Historical Queries.
Figure 2-4
On saving user preferences, system continues to collect data for 4 days. For instance, if

you save your preferences, log out and log back in the following day, your Active View
displays data as if you never logged off.
 If an Active View is created and not saved, it will continue to collect data for an hour.
Within that hour time frame if an identical Active View is created, the Active View
displays data for the last hour.
Snapshot: Time-stamped views of a Real Time Event View table.

The following is what makes an Active View unique.
 Filter assigned to an Active View
The z-axis attribute

The security filter assigned to a user

The Active Views Tab allows you to:
Reconfigure Total Display Time
Add Events to an incident
Close a Snapshot or Navigator Window
Create an Incident
Custom Menu Options with Events
Investigate Event Query
Investigate Graph Map
View Advisor Data
Manage Columns
You can change labels (column names) to user-friendly names and the new names will be populated
throughout the system. For more information, see
Events," on page
38 Sentinel 6.1 User Guide
Gray Line- Smallest Possible Display Interval
Red Line- More Events then Displayed
61.
Send messages about Events by e-mail
Show or Hide Event Details
Snapshot of a Navigator Window
View Events that triggered a correlated event
View Vulnerability Visualization
View Asset Data
Integrate with Ticketing System
View Identity Browser
Section 2.15, "Using Custom Menu Options with