Data Collection: Novell Sentinel Log Manager collects data with the help of connectors. These connectors obtain data from device logs, and collectors parse device log data into a standardized format.

Data Storage: The data flows from data collection components to data storage components. These components use a file based data storage and indexing system to keep device log data and a PostgreSQL database to keep Novell Sentinel Log Manager configuration data. The search and reporting components access and find the requested event log data.in the file based data storage and indexing system. The data storage components also deletes data from storage location when the data retention time limit exceeds or if the available space reduces below an specified disk space value.

Searching and Reporting: The searching and reporting components search the data in both the online and archive storage locations.

User Interface: User interface functionality is provided by a Web server and a Java Web Start based graphical user interface (GUI). All user interfaces communicate with the server by using an encrypted connection.

Collector Manager Optionally, you can remotely install a collector manager from the Sentinel Log Manager server at a suitable location in your network. The collector manager provides a flexible data collection point. The remote collector manager runs the connectors and collectors, forwards the output of the collectors onto Novell Sentinel Log Manager for storage and further processing.