Event Source Management; Understanding Event Source Management; Using Event Source Management - Novell SENTINEL RAPID DEPLOYMENT 6.1 - 12-2009 User Manual

Event Source Management

9
The Event Source Management (ESM) panel provides a set of tools to manage and monitor
connections between Sentinel
graphical interface shows at a glance the current event sources and the software components that are
processing data from that event source. Each component can be easily deployed to quickly integrate
the devices in the enterprise, and then can be monitored in real time within the ESM interface.
Section 9.1, "Understanding Event Source Management," on page 171
Section 9.2, "Introduction to the User Interface," on page 172
Section 9.3, "Live View," on page 180
Section 9.4, "Components of Event Source Hierarchy," on page 184
Section 9.5, "Debugging," on page 202
Section 9.6, "Exporting a Configuration," on page 210
Section 9.7, "Importing a Configuration," on page 212
Section 9.8, "Event Source Management Scratchpad," on page 216
Section 9.9, "Comparing Sentinel 5.x and Sentinel 6.0," on page 216

9.1 Understanding Event Source Management

You need to have appropriate permissions to access this tab. Only a Sentinel Administrator has
controls to enable/disable access to the ESM panel for other users.
Section 9.1.1, "Using Event Source Management," on page 171
Section 9.1.2, "Plug-In Repository," on page 172
Section 9.1.3, "Auxiliary Files," on page 172

9.1.1 Using Event Source Management

Through ESM, you can:
Add/edit connections to event sources by using Configuration Wizards.
View the real-time status of the connections to event sources.
Import/export configuration of event sources to or from Live View/Scratchpad.
View and configure Connectors and Collectors that are installed with Sentinel
Import/export Connectors and Collectors from or to a centralized repository
Monitor data flowing through the Collectors and Connectors
Debug Collectors
Design, configure, and create the components of the Event Source Hierarchy, and execute
required actions using these components. For more information, see
on page 180.
and the event sources that are providing data to Sentinel. The
TM
Section 9.3, "Live View,"
Event Source Management
9
171