Many customers seek to install Sentinel into highly-available environments with the goal of ensuring that critical enterprise event data is collected as consistently as possible. Many security and compliance requirements depend on comprehensive data collection to demonstrate adherence to those requirements - a few missed events could prevent detection of a threat or violation and cause unacceptable risk to the organization. NetIQ has tested and certified Sentinel to work in a high availability environment, and it supports disaster recovery architectures.
This appendix describes how to install the product in an Active-Passive High Availability mode, which allows Sentinel to fail over to a redundant cluster node in case of hardware or software failure. It does not cover Active-Active configurations, and does not guarantee any particular uptime target. NetIQ Consulting and NetIQ partners can help you implement Sentinel high availability and disaster recovery.
NOTE:NetIQ supports the High Availability configuration only in Sentinel all-in-one installations. It does not directly support distributed installs of Collector Managers or Correlation Engines.