Table of Contents
Advertisement
About This Guide
Sentinel
is a security information and event management solution that receives information from
TM
many sources throughout an enterprise, standardizes it, prioritizes it and presents it to you to make
threat, risk and policy related decisions. The Sentinel 6.1 RD User Reference Guide is your
reference for the following:
Collector administrator functions
Collector and Sentinel meta tags
Sentinel console user permissions
Sentinel correlation engine
Sentinel command line options
Sentinel server database views
This guide assumes that you are familiar with Network Security, Database Administration and Linux
operating system.
This guide discusses about:
Chapter 1, "Sentinel 6.1 Rapid Deployment Event Fields," on page 11
Chapter 2, "Sentinel 6.1 Rapid Deployment Control Center User Permissions," on page 25
Chapter 3, "Sentinel 6.1 Rapid Deployment Correlation Engine RuleLG Language," on
page 37
Chapter 4, "Sentinel 6.1 Rapid Deployment Data Access Service," on page 47
Chapter 6, "Sentinel 6.1 Rapid Deployment Database Views for PostgreSQL," on page 55
Appendix A, "Sentinel 6.1 Rapid Deployment Troubleshooting Checklist," on page 121
Appendix B, "Sentinel 6.1 Rapid Deployment Service Permission Tables," on page 125
Appendix C, "Sentinel 6.1 Rapid Deployment Log Locations," on page 133
Audience
This documentation is intended for Information Security Professionals.
Feedback
We want to hear your comments and suggestions about this manual and the other documentation
included with this product. Please use the User Comments feature at the bottom of each page of the
online documentation and enter your comments there.
Additional Documentation
Sentinel technical documentation is broken down into several different volumes. They are:
Novell Sentinel 6.1 RD Installation Guide (http://www.novell.com/documentation/
sentinel61rd/s61rd_install/data/index.html)
About This Guide
9
Advertisement
Table of Contents
