2.12 Actions and Integrators

Actions, either manually or automatically, execute some type of action, such as sending an email. You can trigger Actions by routing rules, by manually executing an event or incident operation, and by correlation rules. Sentinel provides a list of preconfigured Actions. You can use the default Actions and reconfigure them as necessary, or you can add new Actions. For more information, see Configuring Actions in the Sentinel Administration Guide.

An Action can execute on its own, or it can make use of an Integrator instance configured from an Integrator plug-in. Integrator plug-ins extend the features and functionality of Sentinel remediation actions. Integrators provide the ability to connect to an external system, such as an LDAP, SMTP, or SOAP server, to execute an action. For more information, see Configuring Integrators in the Sentinel Administration Guide.