10.2 Introduction to the User Interface

The ESM Live View and Scratchpad are independent windows. This allows you to work on other tabs in Sentinel simultaneously as you work on ESM.

The Event Source Management windows include:

Figure 10-1 Event Source Management-Live View

10.2.1 Menu Bar

The Menu Bar has File, View, Tools and Help options.

Figure 10-2 Event Source Management-Menu Bar

The following are the options available in the each of the Menu Bar options which are described in the document:

  • File

    • Export Configuration

    • Import Configuration

    • Save Preferences

    • Close

  • View

    • Reset Layout

    • Redo Layout

    • Undo Layout

  • Tools

    • Connect to Event Source

    • Import plugin

  • Help

    • About

    • Help

These options allow you to perform a set of actions mentioned below:

10.2.2 Tool Bar

Table 10-1 Event Source Management -User Interface

Launch the wizard for connecting to a new Event Source

Import/Export & Reload Event Source Management Configurations and plugging

The tool bar contains several tools for displaying objects in ESM. You can zoom the entire Graphical view in and out, or zoom directly to a selected region.

The Magnifying Glass allows you to enlarge the text and icons for a small portion of the Graphical view without affecting the overall zoom level.

The Fit to Screen option adjusts the ESM view to fit the screen.

You can select from several different layouts to display the objects in ESM.

You can also enable/disable animations during transition from one layout to the other in the Graphical view of the Health Monitor Display.

You can reset to the default settings too.

10.2.3 Zoom

In ESM, you can use Magnifying Glass to zoom into a region.

HINT:To enable/disable magnifying glass in ESM, use the local zooming using a Magnifying Glass button on the toolbar.

Hot Keys:

You can increase or decrease the magnification factor with the following key combinations:

To increase or decrease the size of magnification glass cursor:

  • To increase: Ctrl key + Backward scrolling of the Mouse wheel

  • To decrease: Ctrl key + Forward scrolling of the Mouse wheel

To increase or decrease the zooming of the nodes:

  • To Zoom in: Forward movement of the Mouse wheel

  • To Zoom out: Backward movement of the Mouse wheel

NOTE:Magnification glass is available only in the Graphical View of ESM window.

10.2.4 Frames

You can see the following Frames in the Live View or Scratchpad window.

Attribute Filter

The Attribute Filter allows you to display the components of ESM. You can specify the components to be displayed based on the component name and status.

Figure 10-3 Attribute Filter frame

  • Text Filter: It allow you to filter the nodes that are displayed in the graphical and tabular view based on the text they type in.

  • State Filter: It allows you to filter the nodes that are displayed in the graphical and tabular view based on the current state of the node.

Hierarchy Filter

The Hierarchy filter sets the display based on the hierarchy you select in this frame. It allows the user to filter the nodes that are displayed in the graphical and tabular view based on the node hierarchy. All children and parents of selected nodes are shown.

Figure 10-4 Hierarchy Filter frame

To set Hierarchy filter for displaying components:

  1. In Sentinel Control Center, click the Event Source Management in the menu bar and select Live View or Scratch Pad.

  2. Click the Hierarchy Filter frame.

  3. Select the Hierarchy Level to display the components.

Connectors

Connectors are plugins in Sentinel. Importing a Connector implements the Connector mechanism in the system. Connectors frame allows you to Add, Remove, and Refresh connectors and Add auxiliary file in the system.

Figure 10-5 Connector frame

Table 10-2 Connector frame Icons

Add

Add Connectors to the system.

Delete

Delete Connectors.

Refresh

Refreshes the list.

Add Auxiliary Files

Add Auxiliary Files. For more information, see Add Auxiliary Files

To add Connector Plugins:

  1. In Sentinel Control Center, click the Event Source Management in the menu bar and select Live View or Scratch Pad.

  2. Click the Script or Connectors frame. You can plugin connectors from here. For more information, see Adding Connectors/Collector Plugins.

Scripts

Collectors are plugins in Sentinel. Collector plugins add the ability to parse raw data from a particular event source. The Scripts frame is used to manage the importing and updating of Collectors (also called “Scripts”) into Sentinel.

Figure 10-6 Scripts frame

Table 10-3 Scripts frame Icons

Add

Add Scripts (Collectors) to the system.

Delete

Delete Collectors.

Refresh

Refreshes the list.

Add Auxiliary Files

Add Auxiliary Files. For more information, see Add Auxiliary Files

To add Collector Plugins:

  1. In Sentinel Control Center, click the Event Source Management in the menu bar and select Live View or Scratch Pad.

  2. Click the Script or Connectors frame. You can import Collectors from here. For more information, see Adding Connectors/Collector Plugins.

Event Source Palette

This frame displays the list of Devices or Event Sources supported by the existing Collectors in the Central Repository. Each Collector ships with meta-information that describes the list of event source types supported by that Collector – this information is compiled to provide the data in this palette. The supported devices for a particular Collector might not necessarily be the same as the name of the Collector.

Figure 10-7 Event Source Palette

Children

This frame displays names of immediate children nodes of a parent (main) node when you click the parent node. This frame is useful to manage children of nodes which have been contracted in the Graphical View. To perform any action in ESM, right-click a component and select from options listed. For more information, see Section 10.3.3, Right-Click Menu.

Figure 10-8 Children frame

Status Details

This frame displays the status details of a selected component in the Health Monitor Display frame.

Available status information includes the current state, the number bytes processed, the number of records sent, the number of Sentinel Events sent, and various other status and statistical information.

NOTE:The status information varies based on the type of component that is selected.

Figure 10-9 Status Details frame

Overview

The overview frame allows you to quickly move across the graphical view. This is particularly useful when there are a lot of objects in the screen.

Figure 10-10 Overview frame