Sentinel provides an Operational EPS graph that displays the average EPS rate received by Sentinel before applying filters at the event source, Connector, or Collector level. You can monitor the EPS rate reaching a single Sentinel server or multiple Sentinel servers distributed across your organization. You can also view the EPS rate in day or hour granularity.
NOTE:To view the EPS rate received by other systems, you need to configure other Sentinel servers as search targets. For more information, see Section 18.0, Configuring Data Federation.
Understanding the operational EPS rate helps you determine whether the EPS rate is as expected and in compliance with the license. You can also generate reports to analyze the EPS rate over a specified time period and from specific Sentinel servers in your organization.
Log in to the Sentinel Web interface with a user account that is a member of the administrator role.
Click About > Licenses.
(Optional) To view the consolidated EPS rate received by other Sentinel servers distributed across your organization, select the IP address or hostname of the desired systems.
(Optional) Click Day or Hour to view the EPS rate for the last 7 days or for the last 24 hours.
(Optional) To export the data to a CSV file, click Export Report.
Specify the time period for which you want to view the EPS rate, then click OK.
(Optional) To view the EPS rate of events filtered and processed by Sentinel, click Collection > Overview.
The Overview graph displays the EPS rate of events filtered and processed by Sentinel, and that actually make it to the event store. For more information, see Section 26.2, Viewing a Graphical Representation of the Events Per Second Rate.