Multiple Sentinel Log Manager servers, local or distributed, can be linked in a hierarchical manner. In this setup, Sentinel Log Manager servers can manage a large volume of data, retaining raw data and event data locally, while forwarding important events to a central Sentinel Log Manager for consolidation.

One or more Sentinel Log Manager servers can forward important data to either a Sentinel server or a Sentinel Rapid Deployment server. These systems provide real-time visualization of data, advanced correlation and actions, workflow management, and integration with identity management systems.

Multiple Sentinel or Sentinel Rapid Deployment servers can be hierarchically linked to monitor the consolidated event information.

One or more Sentinel or Sentinel Rapid Deployment servers can forward important events to a Sentinel Log Manager server for event consolidation.