Table of Contents
Advertisement
Event Source Management
1 0
Section 10.1, "Understanding Event Source Management," on page 179
Section 10.2, "Introduction to the User Interface," on page 180
Section 10.3, "Live View," on page 187
Section 10.4, "Components of Event Source Hierarchy," on page 192
Section 10.5, "Debugging," on page 211
Section 10.6, "Export Configuration," on page 219
Section 10.7, "Import Configuration," on page 221
Section 10.8, "Event Source Management Scratchpad," on page 225
Section 10.9, "Comparison between Sentinel 5.x and Sentinel 6.0," on page 225
10.1 Understanding Event Source Management
The Event Source Management (ESM) panel provides a set of tools to manage and monitor
connections between Sentinel and the event sources which are providing data to Sentinel. The
graphical interface shows at a glance the current event sources and the software components that are
processing data from that event source. Each component can be easily deployed to quickly integrate
the devices in the enterprise, and then can be monitored in real time within the ESM interface.
NOTE: You need to have appropriate permissions to access this tab. Only a Sentinel Administrator
has controls to enable/disable access to the ESM panel for other users.
Through ESM, you can:
Add/edit connections to event sources using Configuration wizards.
View the real-time status of the connections to event sources.
Import/export configuration of event sources to or from Live View/Scratchpad.
View and configure Connectors and Collectors that are installed with Sentinel
Import/export Connectors and Collectors from or to a centralized repository
Monitor data flowing through the Collectors and Connectors
Debug Collectors
Design, configure and create the components of the Event Source Hierarchy, and execute
required actions using these components. For more information, see
on page
187.
Section 10.3, "Live View,"
Event Source Management
10
179
Advertisement
Table of Contents
