4.1 Sentinel Licenses

This section provides information about the types of Sentinel licenses.

4.1.1 Evaluation License

The default evaluation license allows you to use all the features of Sentinel Enterprise for a specific evaluation period with unlimited EPS subject to the capacity of your hardware. For information about the features available in Sentinel Enterprise, see Table 4-1, Sentinel Services and Features.

The expiration date of the system is based on the oldest data in the system. If you restore old events to your system, Sentinel updates the expiration date accordingly.

After the evaluation license expires, Sentinel runs with a basic, free license that enables a limited set of features and a limited event rate of 25 EPS. This is applicable only if Sentinel is configured with traditional storage.

In scalable storage deployments, Sentinel will no longer store events and raw data when the evaluation license expires.

After you upgrade to an enterprise license, Sentinel restores all functionality. To prevent any interruption in functionality, you must upgrade the system with an enterprise license before the evaluation license expires.

4.1.2 Free License

The free license allows you to use a limited set of features with a limited event rate of 25 EPS. The free license is applicable only for Sentinel with traditional storage.

The free license allows you to collect and store events. When the EPS rate goes above 25, Sentinel stores the events received, but does not display the details of those events in the search results or reports. Sentinel tags these events with the OverEPSLimit tag.

The free license does not provide real-time features. You can restore all the functionality by upgrading the license to an enterprise license.

NOTE:Technical support and product updates are not available for the free version of Sentinel.

4.1.3 Enterprise Licenses

When you purchase Sentinel, you receive a license key through the customer portal. Depending on the license you purchase, your license key enables features, data collection rates, and event sources. There might be additional license terms that are not enforced by the license key, therefore read your license agreement carefully.

To make changes to your licensing, contact your account manager.

You can add the enterprise license key either during the installation or any time thereafter. To add the license key, see Adding a License Key in the Sentinel Administration Guide.