Novell SENTINEL 6.1 SP2, User Manual, Page: 38 / 528

38 Sentinel 6.1 User Guide
no
vd
ocx
(e
n)
7 Ja
nua
ry 201
0
Figure 2-3
Gray Line- Smallest Possible Display Interval
In the event when there are more than 750 per 30-second time period, a red separation line
displays indicating that there are more events than what is displayed. The other events can
be viewed by using Historical Queries.
Figure 2-4
Red Line- More Events then Displayed

On saving user preferences, system continues to collect data for 4 days. For instance, if
you save your preferences, log out and log back in the following day, your Active View
displays data as if you never logged off.

If an Active View is created and not saved, it will continue to collect data for an hour.
Within that hour time frame if an identical Active View is created, the Active View
displays data for the last hour.

Snapshot: Time-stamped views of a Real Time Event View table.
The following is what makes an Active View unique.

Filter assigned to an Active View

The z-axis attribute

The security filter assigned to a user
The Active Views Tab allows you to:
You can change labels (column names) to user-friendly names and the new names will be populated
throughout the system. For more information, see
Section 2.15, “Using Custom Menu Options with
Events,” on page 61 .
Reconfigure Total Display Time
Add Events to an incident
Close a Snapshot or Navigator Window
Create an Incident
Custom Menu Options with Events
Investigate Event Query
Investigate Graph Map
View Advisor Data
Manage Columns
Send messages about Events by e-mail
Show or Hide Event Details
Snapshot of a Navigator Window
View Events that triggered a correlated event
View Vulnerability Visualization
View Asset Data
Integrate with Ticketing System
View Identity Browser