Correlation Engine; B.3 Correlation Engine - Novell SENTINEL RAPID DEPLOYMENT 6.1 - REFERENCE GUIDE 06-15-2009 Reference Manual

B.3 Correlation Engine

Correlation Engine

Table B-3
Sentinel
Sentinel Service
Component
Correlation Sentinel
Engine
Sentinel Function
Process summary
java Receives
events from the
Collector
Manager and
publishes
correlated
events based
on user-defined
correlation
rules.
Sentinel 6.1 Rapid Deployment Service Permission Tables 127
Permission
Permission's required
Explanation
Network access It
communicates
File read access to:
over the
network with
<Install_Directo
ActiveMQ for
ry>/config
configuration,
<Install_Directo
event
ry>/lib
processing, and
correlated
<Install_Directo
event
ry>/jre
generation.
File write access to:
It reads local
configuration
<Install_Directo
files and uses
ry>/data
the java
<Install_Directo
executable.
ry>/log
It writes log files
as well as
caches data in
the local file
system.