Novell SENTINEL 6.1 SP2 - 02-2010 User Manual page 459

representation and others. Additional valuable information can be viewed from the Active Views
dashboard, including notification of asset exploits (exploit detection), viewing asset information and
graphical associations between pertinent source IPs and destination IPs.
Because Active Views uses the iSCALE architecture, analysts can quickly drill down for further
analysis because Active Views provides direct access to the real-time memory-resident event data,
which easily handles thousands of events per second without any performance degradation. Data is
kept in memory and written to the database as needed (Active Views can store up to 8 hours of data
in memory with typical event loads). This uninterrupted, performance-oriented real-time view is
essential when under attack or in steady-state.
Active View
Figure A-12
Sentinel Architecture 459