C.3 Correlation Engine - Novell SENTINEL 6.1 SP2 - REFERENCE GUIDE 02-2010 Reference Manual

C.3 Correlation Engine

Correlation Engine
Table C-3
Sentinel
Sentinel Service
Component
Correlation Sentinel
Engine
Sentinel Function
Process summary
java Receives
events from the
Collector
Manager and
publishes
correlated
events based
on user-defined
correlation
rules.
Permission's Permission
required Explanation
Network access It
communicates
File read
over the
access to:
network with
iSCALE for

ESEC_HOME
configuration,
/config
event

ESEC_HOME
processing, and
/lib
correlated
event

ESEC_HOME
generation.
/jre
It reads local
File write
configuration
access to:
files and uses
 the java
ESEC_HOME
executable.
/data

ESEC_HOME
It writes log files
/log
as well as
caches data in
the local file
system.
Sentinel Service Permission Tables 203