Table of Contents
Advertisement
NOTE: You cannot stop the Windows Communication Server and Unix Communication Server
using this feature.
11.5 Filters
Filters allow you to process data based on specific criteria for events in real-time and for users of the
system. Filters enable you to manage data seen in the Sentinel Control Center. The Filter Engine
drives the Real Time Event windows by maintaining the data structure for each security filter. Filters
prevent users from viewing unauthorized events and drop events that users don't want to see. Filters
are created in the Admin tab of the Sentinel Control Center.
NOTE: The following are invalid filter name characters: $ # . * & : < >.
There are three types of filters:
Section 11.5.1, "Public Filters," on page 234
Section 11.5.2, "Private Filters," on page 234
Section 11.5.3, "Global Filters," on page 235
Color Filters
11.5.1 Public Filters
Public filters are system-owned. Public filters can be used as security filters or display filters.
Security filters are based on user permissions. Display filters determine which events are depicted in
the real time event tables, charts and graphs.
Figure 11-3
11.5.2 Private Filters
Private filters are user-owned. Private filters are display filters and are shareable if you have the
View Private Filters permission.
234 Sentinel 6.1 User Guide
Filter Manager window
Advertisement
Table of Contents
