Quick Start; Security Analysts; Active Views Tab - Novell SENTINEL 6.1 SP2 - 02-2010 User Manual

Quick Start

1 4
 Section 14.1, "Security Analysts," on page 307
Section 14.2, "Creating Incidents," on page 310

Section 14.3, "iTRAC," on page 312

 Section 14.4, "Report Analyst," on page 325
Section 14.5, "Administrators," on page 326


14.1 Security Analysts

NOTE: This document assumes your Security Administrator has built the necessary filters and
configured Collectors for your system.

14.1.1 Active Views Tab

In the Active Views tab, you can monitor events as they happen, performing queries on these events.
You can monitor them in a table form or through a 3-D graphical representation.
To get a Real-Time events started:
1 Go to the Active View tab.
2 Click Active Views > Create an Active View, select a filter from the Filter drop-down menu
and click Select.
14
Quick Start 307