Top Ten Reports - Novell SENTINEL 6.1 SP2 - 02-2010 User Manual

The Navigation Tree in the Navigation Pane
The Toolbar Buttons

7.2.1 Top Ten Reports

The following are the Top 10 reports which are available in Sentinel 6:
Top 10 Correlation Rules Triggered

 Top 10 Destination Host Names
Top 10 Destination IP Addresses

Top 10 Destination Port Numbers

 Top 10 Destination User Names
Top 10 Destination Event Names

Top 10 Source Host Names

 Top 10 Source IP Addresses
Top 10 Source to Destination IP Pairs

Top 10 Source User Names

 Top 10 Virus Names
Event Count by Top 10 Assets

Event Count by Top 10 Departments

Event Count by Top 10 Taxonomy Level 3

 Incidents by Top 10 Assets
Incidents by Top 10 Users

The Top 10 reports are enabled by default, and the following summaries are turned on to enable the
Top 10 reports:
EventDestSummary

EventSevSummary

EventSrcSummary

If Top 10 reports are not needed, you can disable these summaries, or you can enable additional
summaries in order to use them for reporting. If the summary service is not in use, you can disable it.
154 Sentinel 6.1 User Guide