7.5 Working with Sentinel Scalable Data Manager

Sentinel Scalable Data Manager enables you to manage data collection and correlation, and provides other SSDM capabilities. For other Sentinel capabilities such as Security Intelligence and reporting, you must install additional Sentinel servers with traditional storage. You can configure event routing rules to forward specific events required for analysis from Sentinel Scalable Data Manager to those Sentinel servers by using Sentinel Link.

To configure data collection and event routing rules, see Section IV, Collecting and Routing Event Data.

To search and visualize events, see the following chapters in the NetIQ Sentinel User Guide: