A.0 Configuring Sentinel for High Availability

Many customers seek to install Sentinel into highly-available environments with the goal of ensuring that critical enterprise event data is collected as consistently as possible. Many security and compliance requirements depend on comprehensive data collection to demonstrate adherence to those requirements - a few missed events could prevent detection of a threat or violation and cause unacceptable risk to the organization. NetIQ Corporation has tested and certified Sentinel to work in a high availability environment, and it supports disaster recovery architectures.

This appendix describes how to install the product in an Active-Passive High Availability mode, which allows Sentinel to fail over to a redundant cluster node in case of hardware or software failure. It does not cover Active-Active configurations, and does not guarantee any particular uptime target. NetIQ Consulting and NetIQ partners can help you implement Sentinel high availability and disaster recovery.

NOTE:High Availability (HA) configuration is supported only on the Sentinel server. However, Collector Managers and Correlation Engines can still communicate with the Sentinel HA server.