NetIQ Documentation: NetIQ Sentinel 7.0.1 Administration Guide - Configuring Data Collection for Other Event Sources

6.4 Configuring Data Collection for Other Event Sources

The Advanced tab in Sentinel Web interface is used to launch the Event Source Management interface, which monitors and configures advanced data collection capabilities beyond the settings currently available in the Web interface. Some Connectors and Collectors must be configured in Event Source Management, such as the WMS connector for Windows, Database connectors, and SDEE connectors for Cisco devices.

You can perform the following tasks through the Event Source Management window:

Add or modify connections to event sources by using Configuration wizards.
View the real-time status of the connections to event sources.
Import or export configuration of event sources to or from the Live View.
View and configure Connectors and Collectors that are installed.
Import or export Connectors and Collectors from or to a centralized repository.
Monitor data flowing through the Collectors and Connectors.
Design, configure, and create the components of the event source hierarchy, and execute required actions by using these components.

Java 1.6 Web Start is required to launch the Event Source Management Web application.

NOTE:If you are using openSUSE11.1, update your JRE to latest JRE 1.6 update. Then use the Java Web Start (javaws) launcher command to launch the Event Source Management.

Use the following procedure to launch the Event Source Management (Live View) window:

Log in to the Sentinel Web interface as a user in the administrator role.
Click Collection in the toolbar, then click the Advanced tab.
Click the Launch Control Center to launch the Sentinel Control Center.
Specify the username and password to log in to Sentinel Control Center, then click Login.

Only users with the administrator role are allowed to log in to SCC.
In the toolbar, click Event Source Management > Live View.

The Event Source Management (Live View) interface provides a set of tools to manage and monitor connections between Sentinel and the event sources that are providing data to Sentinel. The graphical interface shows the current event sources and the software components that are processing data from that event source. Each component can be easily deployed to integrate the devices in the enterprise, and it can be monitored in real time within the Event Source Management interface. For more information, see Section 1.3, Event Source Management.