Currently Sentinel creates checksum only for rawdata in secondary storage. There are some cases where checksum is needed to event data as well.
-Br, TimoS
by: Timo S. | over a year ago | Other
by: Timo S. | over a year ago | Other
Currently Sentinel creates checksum only for rawdata in secondary storage. There are some cases where checksum is needed to event data as well.
-Br, TimoS
by: Timo S. | over a year ago | Other
Comments
Addenum: The current method of checking and searching of rawdata is quite manual work intensive. It would be great to have checksum counted for every event data file which means that everything you search from gui is verified with checksum. Now that is not the case.
Providing this information in case it helps: https://www.netiq.com/documentation/sentinel-81/admin/data/bq8s3ue.html#b1ak7k25
Timo, does the best practices page that John pointed to help you with this? Or is there still a need here? I am not completely understanding the goal of what you are needing.
I'll take a look. Information that John provided looks promising.
It seems that this FR is not needed. This functionality is already in the product.