13.2 Starting and Stopping the Sentinel Server

A Sentinel Server is made up of the following components:

Any combination of the above components can be installed in a particular Sentinel Server.

In a distributed installation of Sentinel, it is likely that there will be more than one machine with a Sentinel Server running on it. In this case, all of the Sentinel Servers work together to provide the complete Sentinel functionality.

NOTE:At most one Communication Server and DAS component can be installed across all Sentinel Servers in a distributed Sentinel installation. On the other hand, multiple instances of Correlation Engine and Collector Managers are allowed.

When a Sentinel Server is started or stopped, all components installed in that Sentinel Server are also started or stopped. To start or stop a particular component on a Sentinel Server, use the Servers View under the Admin tab in Sentinel Control Center.

You need to start or stop a Sentinel Server because of the following routine maintenance:

13.2.1 Starting a Sentinel Server

To start the UNIX Sentinel Server:

  1. Log into the machine where the Sentinel Server you want to start is installed as the Sentinel Administrator operating system user (by default esecadm).

  2. Go to the $ESEC_HOME/bin directory.

  3. Run the following command:

    ./sentinel.sh start
    

To start the Windows Sentinel Server:

  1. Click Start > Settings > Control Panel.

  2. Double-click Administrative Tools.

  3. Double-click Services.

  4. In the Services window, highlight Sentinel.

  5. Right-click >Start or click Start in the tool bar.

13.2.2 Stopping a Sentinel Server

To stop the UNIX Sentinel Server:

  1. Log into the machine where the Sentinel Server you want to stop is installed as the Sentinel Administrator operating system user (by default esecadm)

  2. Go to the $ESEC_HOME/bin directory.

  3. Run the following command:

    ./sentinel.sh stop
    

To stop the Windows Sentinel Server:

  1. Click Start > Settings > Control Panel.

  2. Double-click Administrative Tools.

  3. Double-click Services.

  4. In the Services window, highlight Sentinel.

  5. Right-click >Stop or click Stop in the tool bar.