Multiple Sentinel servers, local or distributed, can be linked in a hierarchical manner. In this setup, Sentinel servers can manage a large volume of data, retaining raw data and event data locally, while forwarding important events to a central Sentinel server for consolidation.

One or more Sentinel servers can forward important data to either a Sentinel server, Sentinel Log Manager server, or a Sentinel Rapid Deployment server. These systems provide real-time visualization of data, advanced correlation and actions, workflow management, and integration with identity management systems.

Multiple Sentinel, Sentinel Log Manager, or Sentinel Rapid Deployment servers can be hierarchically linked to monitor the consolidated event information.

One or more Sentinel, Sentinel Log Manager, or Sentinel Rapid Deployment servers can forward important events to a Sentinel server for event consolidation.