Administrators; Simple Correlation - Novell SENTINEL 6.1 SP2 - 02-2010 User Manual

5 You can export this file as a doc, pdf, rtf, xls or as a Crystal Report by clicking Export
(envelope).
Similar to the Security Analyst, if you have an event or events of interest within your reports, you
can run an Event Query under the Analysis tab. To run a query, highlight Historical Events >
Historical Event Queries and click Create Reports (magnifying glass). For more information, see
section Event Query Sample Scenario.

14.5 Administrators

This section is about administrator actions.

14.5.1 Simple Correlation

Correlation is the process of analyzing security events to identify potential relationships between
two or more events. Correlation allows quick association of priority attacks based on common
elements of event data.
326 Sentinel 6.1 User Guide