Novell Sentinel Rapid Deployment 6.1, Installation Manual

Page: 14 / 84

14 Sentinel 6.1 Rapid Deployment Installation Guide
no
vd
ocx
(e
n)
17
Sep
te
m
be
r 20
09
Sentinel content is the extended functionality of the Sentinel system. It includes Sentinel plug-ins,
Sentinel Actions, Integrators, and Sentinel plug-ins such as Collectors, Connectors, and Solution
Packs that might include multiple other types of plug-ins.These modular components are used to
integrate with third-party systems, install a complete control-based security solution, and provide
automated remediation for detected incidents.
Fore more information, see “ Solution Designer ” in the Sentinel 6.1 Rapid Deployment User Guide .
1.2.5 Sentinel Plug-in SDK
The Sentinel Plug-in SDK includes libraries and code developed by the Novell Engineering, as well
as the template and sample code which you can use to begin developing your own projects. For
more information, see
Sentinel SDK (http://developer.novell.com/wiki/
index.php?title=Develop_to_Sentinel#Sentinel_Plug-in_SDK) .
1.2.6 Sentinel Collector Builder
The Sentinel Collector Builder enables you to build Collectors in the Sentinel proprietary, legacy
language to process events. You can create and customize the templates so that the Collector can
parse the data. For more information on developing your own Collectors, see
Developing Sentinel
Collector Plug-ins (http://developer.novell.com/wiki/index.php/Collectors) .
1.3 Sentinel Server Components
Sentinel is made up of the following components:

Section 1.3.1, “Data Access Service,” on page 14

Section 1.3.2, “Message Bus,” on page 15

Section 1.3.3, “Sentinel Database,” on page 15

Section 1.3.4, “Sentinel Collector Manager,” on page 15

Section 1.3.5, “Correlation Engine,” on page 15

Section 1.3.6, “iTRAC,” on page 15

Section 1.3.7, “Sentinel Advisor and Exploit Detection,” on page 15

Section 1.3.8, “Web Server,” on page 16
1.3.1 Data Access Service
The Sentinel Data Access Service is the primary component used to communicate with the Sentinel
database. The Data Access Server and other server components work together to store events
received from the Collector Managers into the database, filter data, process Active Views
TM
displays,
perform database queries and process results, and manage administrative tasks such as user
authentication and authorization. For more information, see “
Sentinel 6.1 Rapid Deployment Data
Access Service ” in the Sentinel 6.1 Rapid Deployment Reference Guide .