Novell SENTINEL LOG MANAGER 1.0.0.4 - S Release Note Download Page 18

18

Novell Sentinel Log Manager 1.0.0.4 Release Notes

n

ov

do

cx (e

n)

  22
 Ju

n

e 20
09

7  Documentation Conventions

In this documentation, a greater-than symbol (>) is used to separate actions within a step and items 
in a cross-reference path.

A trademark symbol (

®

TM

, etc.) denotes a Novell trademark; an asterisk (*) denotes a third-party 

trademark

8  Legal Notices

Novell, Inc. makes no representations or warranties with respect to the contents or use of this 
documentation, and specifically disclaims any express or implied warranties of merchantability or 
fitness for any particular purpose. Further, Novell, Inc. reserves the right to revise this publication 
and to make changes to its content, at any time, without obligation to notify any person or entity of 
such revisions or changes.

524671

Issue: Integrators threads are not started when server starts.

Currently, the Sentinel Link Integrator is not initialized and started until 
they receive their first event from an action. This is because it may have 
events stored in its queue that should be forwarded. When the Integrator 
starts, a background thread is also started to process this.

Workaround: If Integrator is not sending events, either because no events 
are happening or events are being filtered by rules, you must generate a 
fake event that does not get filtered in order to get your Integrator started.

To determine if the Integrator thread is started, search for a message in 
the log that indicates that the Integrator has started. It will be logged by the 
StoreAndForward logger 
(esecurity.ccs.comp.Integrator.slink.StoreAndForward), and will have a 
message similar to the following:

Thread processing messages from store and forward queue 
starting up

.

or

SentinelLinkStoreAndForward thread starting up

.

NOTE: 

The actual message might change, so search for messages 

logged by the StoreAndForward logger.

526364

Issue: Some connector documentation has the wrong version of the 
connector stated in the documentation. For example, the documentation 
may say 6r5 when the version of the connector is really 6r6. 

Workaround: This is a typo. To determine the correct version of the 
connector, open the Event Source Manager Interface, select the 
connector from the list of connectors on the left hand side of the interface, 
and click the 

info

 button.

Issue Number

Description

Summary of Contents for SENTINEL LOG MANAGER 1.0.0.4 - S

Page 1: ...ation on page 5 Section 5 Issues Fixed on page 7 Section 6 Known Issues on page 14 Section 7 Documentation Conventions on page 18 Section 8 Legal Notices on page 18 1 What s New in Novell Sentinel Log...

Page 2: ...ults to an action Download the raw data files for the selected event result s event source by using the get raw data link View new event fields information in the search results For example it display...

Page 3: ...Syslog and Novell Audit connectivity to make it even easier to start collecting logs from event sources You can direct all the logs to Sentinel Log Manager Messages from recognized data sources are pa...

Page 4: ...ww novell com documentation novelllogmanager10 novell_log_manager data bjx8zq7 html in the Novell Sentinel Log Manager Guide For more information about data storage configuration see Configuring Data...

Page 5: ...t of Sentinel Log Managers complete logs can be retained at multiple regional locations while more important events are forwarded to a single Sentinel Log Manager for centralized search and reporting...

Page 6: ...the installer SENTINEL_LOG_MANAGER_1 0 0 4 zip to a temporary directory 3 Change to the temporary directory 4 Unzip the install package by using the following command unzip SENTINEL_LOG_MANAGER_1 0 0...

Page 7: ...Manager 1 0 0 3 Release on page 9 Section 5 3 Issues Fixed in Sentinel Log Manager 1 0 0 2 Release on page 11 Section 5 4 Issues Fixed in Sentinel Log Manager 1 0 0 1 Release on page 11 5 1 Issues Fix...

Page 8: ...earch tab with the search criteria of a previous search rather than the currently typed in search Fixed The new search tab now always has the most recently typed in search criteria Issues Fixed Descri...

Page 9: ...ils had default subject value Fixed Now you can specify a subject line using the Subject field in the Send an Email action user interface 530183 Issue The number of records value that went into a coll...

Page 10: ...s in an error on the server that prevents any users from logging into the Web interface or ESM user interface Fixed The bug is fixed so that all valid filters are now accepted and evaluated properly F...

Page 11: ...ixed IndexedLogComponent will now shutdown gracefully under heavy load 540119 Issue When the Sentinel Log Manager Server runs for many days for example 25 40 days it stores huge amount of EPS data whi...

Page 12: ...is cached on the Collector Manager file system Fixed The communication links between the Sentinel Log Manager server and either Tomcat or Collector Managers recovers even when the link is dropped tem...

Page 13: ...e the following command Installation_Directory bin server sh restart 522907 Issue On deleting a data retention policy an unnecessary exception is logged if the policy has events that match the specifi...

Page 14: ...curs in the Tomcat server related to the Data Collector Events Per Second chart Fixed The out of memory issue conditions has been fixed when generating this chart 501503 Issue The start_tomcat sh scri...

Page 15: ...this issue is fixed 524473 Issue The prompt for using the 90 day evaluation license is not localized in non English versions of the product 521942 Issue If many reports are run within a sort period o...

Page 16: ...4 Specify the command to change directory cd opt novell sentinel_log_mgr_1 0_x86 64 config 5 hostname f make sure a valid hostname is returned if not fix hostname NOTE All passwords must remain set t...

Page 17: ...ription 524664 Issue Queue full condition might cause unpredictable behavior If a queue size limit is set for the Integrator and the queue is full and the Integrator configuration specifies that the o...

Page 18: ...ntegrator starts a background thread is also started to process this Workaround If Integrator is not sending events either because no events are happening or events are being filtered by rules you mus...

Page 19: ...eliverables for prohibited nuclear missile or chemical biological weaponry end uses Please refer to the Novell International Trade Services Web page http www novell com info exports for more informati...

Reviews: