Newbie Sentinel Installation & Deployment Questions

[ab@novell.com]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Which documentation are you reading specifically and which product do you
have (if any) purchased? If you are a new use of Sentinel (meaning the
full SIEM product) you should probably start with Sentinel RD. It is made
to be easily deployed and otherwise has most if not all of the features of
the main Sentinel 6.1 product but with several benefits. First, it uses
ActiveMQ and Jasper Reports instead of Sonic and Crystal Reports. This
improvement in technologies used is substantial, especially on the
reporting side. Also Sentinel RD ships with PostgreSQL and does not
require you to install a DB on your own which is great as well. Finally,
due to a combination of a fair bit of work and the aforementioned changes
the install is so much better it's not even worth mentioning Sentinel 6.1.
Sentinel 6.1 requires you to have your own DB and the install is much
more confusing and RD cleans all of that up.

Anyway start with Sentinel RD if you are after the full SIEM and Novell
Log Manager is also an option but it also does not need you to have your
own DB ahead of time as it installs everything it needs at once. It is
made to handle higher amounts of data with less processing initially but
can then forward relevant data on to Sentinel for additional processing
and so if you do have the need for that then Novell Log Manager is for you.

Good luck.






miguel rodriguez wrote:
> I'm tryng to established the infraestructure necesary to run sentinel.
>
> The documentation is fussy and as newbie as I am. I don't understand
> the different parts that works for sentinel. I need to know what to
> install in every single server and how many servers I need.
>
> I'm reading the documentation, but i don't get the big picture, because
> I found documentation of the Sentinel Log Manager.
>
> So I have to install the database(Store Meta data and summarized
> data?), the collector(inserst raw data to the database?) the Sentinel
> log manager (is good to use if you have several sites and wants to
> filter and compress information? is something like a collector storage,
> with the capabilities of filter compress and storage, but what database
> use? the sentinel original database or an new instance of oracle or new
> instance of sql) as far as I know the Sentinel log manager is installed
> on Linux only. So?
>
> As you can see I'm very confused about the componentes, the
> functionality, the OS supported and where I have to install every single
> component. For better performance and the most cost effective.
>
> So any help would be appreciated.
>
> thanks in advanced Mike
>
>
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.9 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

iQIcBAEBAgAGBQJK864ZAAoJEF+XTK08PnB5LyIQAKQR94toqx 7XkvSp0+4wj28e
2i+CMZXzcTOsZ8YuEcWpCeBJljuQYuWBuZZ0w3JrjHs/AUn32sSNZo+fHpi7O4JA
qvlN7tmxbYrfe9sCSIja7F2ApB9Ef9ME11wUt/8tw+2Ma+3cuDgNKgV/9WxWaZ0m
/IgIAlBPvUYn/qSXYm4PhXe2r8ebKpC0YiCxTlIlyXfJMlWjFVVdgU0EeZHUAnF R
LSoAx9KMv708+kBiJ+Z4qtOs/po0uSgs9xxnOsedq5dgG4AqD02TALaUb55hHBXv
9yPzi3n8bQ5FbtgeS1mvL6IAvtDRQK7gS3yc+whh5Fj7f8YYD1 dZsXKqb8tpd8PY
hJOazUPlDklBNW/YiPR4UIDPieCCD4ib8xWizsxpAC1nDajFEY8o6aQYK1vgSByy
miUBr/hwozz2enrE9UyTRquhQngu1QNfZsB3iUiGkUgfCoMMdI1mz2/O/rtExF32
zNaUjCpXKWDr1ot8vBiMCMBynWi9fL4BcJkvPJDCuTSLGu1bUE 6S8ovX8zgIzsBF
3tS9QqCT36JNRvi6CgPfbtiErepCw66PUKKC/1LXEzxccgRI/F7w3FN4N/4KPRw0
8qgFRPO9vYMwuN7swv5/0YUUn6NVGQENMkUTqL5ZtCDCVcbJ3iCVOiFbZ0ybGVRj
gEp3inI1pLSlTtopFW+G
=FWrb
-----END PGP SIGNATURE-----