Correlation Action Definition; Correlation Engine Configuration; Correlation Engine Is Running - Novell SENTINEL RAPID DEPLOYMENT 6.1 - 12-2009 User Manual

B.7.1 Correlation Action Definition
Table B-69
Tag
Severity
Event Name
Resource
SubResource
Message
B.7.2 Correlation Engine Configuration
Table B-70
Tag
Severity
Event Name
Resource
SubResource
Message
B.7.3 Correlation Engine is Running
The correlation engine process can be idled by the user. Its running state determines whether the
active process is processing events or not. The process starts in the idle (stopped) state and waits to
retrieve its configuration from the database. This event is sent when the engine changes state from
stopped to running.
Table B-71
Tag
Severity
Event Name
Resource
SubResource
Message
440 Sentinel 6.1 Rapid Deployment User Guide
Correlation Engine : Correlation Action Definition
Value
New/Update/Remove
Correlation
CorrelationActionDefinition
Action Name: <name> with Id: <ID>
Correlation Engine : Correlation Engine Configuration
Value
New/Update/Remove
Correlation
CorrEngineConfig
Correlation Engine ID: <ID> Name: <name> Active: {2}
Correlation Engine : Correlation Engine is Running
Value
1
EngineRunning
CorrelationEngine
CorrelationEngine
Correlation Engine is processing events.