Novell SENTINEL 6.1 SP2 - REFERENCE GUIDE 02-2010 Reference Manual page 148

Column Name
RESOURCE_NAME
SUB_RESOURCE
SEVERITY
EVENT_PARSE_TIME
EVENT_DATETIME
EVENT_DEVICE_TIME
SENTINEL_PROCESS_TIME
BEGIN_TIME
END_TIME
REPEAT_COUNT
DESTINATION_PORT_Int
SOURCE_PORT_Int
BASE_MESSAGE
EVENT_NAME
EVENT_TIME
AGENT_ID
SOURCE_IP
SOURCE_IP_DOTTED
SOURCE_HOST_NAME
SOURCE_PORT
DESTINATION_IP
DESTINATION_IP_DOTTED
DESTINATION_HOST_NAME
DESTINATION_PORT
SOURCE_USER_NAME
148 Sentinel 6.1 Reference Guide
Datatype
varchar/nvarchar(255)
varchar/nvarchar(255)
int
datetime
datetime
datetime
datetime
datetime
datetime
int
int
int
varchar/nvarchar(4000)
varchar/nvarchar(255)
varchar/nvarchar(255)
bigint
int
varchar/nvarchar (16)
varchar/nvarchar(255)
varchar/nvarchar(32)
int
varchar/nvarchar (16)
varchar/nvarchar(255)
varchar/nvarchar(32)
varchar/nvarchar(255)
Comment
Resource name
Subresource name
The normalized Sentinel event severity (0-
5)
The absolute time, according to Sentinel,
that this event occurred
Event time
A timestamp representation of the time the
event occurred, according to the event
source
The time at which Sentinel processed the
event
The time the event began to occur, if the
event represents a lengthy transaction
The time the event completed, if the event
represents a lengthy transaction
The number of times the identical event
occurred
Destination port (integer)
Source port (integer)
A descriptive string which describes the
event and some event details of what
occurred
A short, abstract description of the event,
such as "User Logged In"
A string representation of the time,
according to the event source, that the
event occurred
Collector identifier
Source IP address in numeric format
Source IP in dotted format
Source host name
Source port
Destination IP address in numeric format
Destination IP in dotted format
Destination host name
Destination port
Source user name