Novell SENTINEL 6.1 SP2, Руководство пользователя, Страница: 266 / 528

266 Sentinel 6.1 User Guide
no
vd
ocx
(e
n)
7 Ja
nua
ry 201
0
NOTE: Clicking on Apply saves the changes you made for the currently selected event tag in a
temporary buffer. If you don't click Apply, when you select a different event tag, the changes
you made to the previously selected event tag are lost. Changes won’t be saved to the server
until you click Save.
5 Click Save.
NOTE: Clicking Save will save your changes to the server. The save function saves all
changes stored in the temporary buffer (when you clicked Apply).
6 In order for changes to be visible in Sentinel Control Center, running Sentinel Control Centers
must be closed and reopened.
11.10 Report Data Configuration
NOTE: In order to use Report Data Configuration, your
configuration.xml
file must be
pointing to a Communication Server that has DAS_Binary and DAS_Query connected to it. This
will normally be the case, by default, as long as the Communication Server and DAS processes are
running.
The Report Data Configuration option allows you to enable and disable summaries, or aggregate
tables in the Sentinel database. Enabling a summary allows aggregation to start computing the
counts for that particular summary and will shorten the execution time for any report that uses the
summary table. Sentinel Top 10 reports use summary tables.
A summary is a defined set of attributes that make up the key for which to compute the number of
unique occurrences (event count) by each hour time period (event time). In the case of the
EventSevDestPortSummary, when active, it saves the count of events for each unique combination
of destination port and severity for an hour time frame. These saved computations of the event data
allow for quicker summary reporting and querying. These reports are used by Crystal Reports
Server. For more information, see “
Crystal Reports for Windows ” and “ Crystal Reports for Linux ”
in the Sentinel 6.1 Installation Guide . Certain summaries will need to be active in order for the
summary reports to be accurate.
Aggregation is the process of calculating the running count for all active summaries as events flow
through the system. These running counts are saved to the database in the respective summary
tables.
Summaries Benefits:
 Greatly reduced event data set

Conformed dimensions that allow the ability to drill-down, roll-up and drill-across on event
data

Summary reports run much faster with pre-computed summaries
Aggregation Benefits:
 Only processes active summaries

Does not affect event insertion into the real time database.