14.4 Working with Sentinel Scalable Data Manager

Sentinel Scalable Data Manager enables you to manage data collection and correlation, and provides other SSDM capabilities. For other Sentinel capabilities such as Security Intelligence and reporting, you must install additional Sentinel servers with traditional storage. You can configure event routing rules to forward specific events required for analysis from Sentinel Scalable Data Manager to those Sentinel servers by using Sentinel Link.

To configure data collection and event routing rules, see Section III, Collecting and Routing Event Data.

To search and visualize events, see the following chapters in the Sentinel User Guide: