Viewing The Advisor Data - Novell SENTINEL 6.1 SP2 - 02-2010 User Manual

8.6 Viewing the Advisor Data

The following are the prerequisites to view the Advisor data:
The Advisor feed must be up-to-date, processed, and loaded into the Sentinel database.

 The selected event is from a product supported by Advisor and has the Vulnerability field value
set to 1.
You can view the Advisor data from the following options:
 Active Views tab
1. In the Sentinel Control Center, click Active Views.
2. In the real-time events table, right-click an event that has the Vulnerability field value set
to 1.
3. Click Create Incident > Advisor or click Analyze > Advisor Data.
Advisor Data
Figure 8-4
Analysis tab

1. In the Sentinel Control Center, click Analysis > Offline Queries.
2. Add an offline query that filters events with the Vulnerability value set to1.
For more information on adding an offline query, see
page 156.
Advisor Reports

For information on using Advisor reports to view the Advisor data, see
Reports in the Sentinel Control Center" on page
Section 7.3, "Offline Query," on
"Viewing the Advisor
170.
Advisor Usage and Maintenance 169